CVE-2024-35222

CVE-2024-35222 affects Tauri; remote origin iFrames can bypass origin checks to access IPC endpoints when not explicitly allowed (v1: before 1.6.7; v2: before 2.0.0-beta.19). Vulnerability enables an attacker-controlled iframe to invoke Tauri commands (e.g., delete project, transfer credits) via ...