https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 15:22:24 +0000 https://cve.radiocsirt.org/vuln/cve-2026-42184 <p><strong>Affected:</strong> tauri-apps tauri</p> <p>Tauri is a framework for building binaries for all major desktop platforms. From 2.0 to 2.11.0, a flaw in Tauri&#39;s is_local_url() function causes it to incorrectly classify remote URLs as trusted local origins on Windows and Android. On these systems, Tauri maps custom URI scheme protocols to http://&lt;scheme&gt;.localhost/ because those platforms&#39; WebView implementations cannot serve custom URI schemes directly. The issue is that Tauri&#39;s check to see if the origin is local, only checks the first subdomain of the URL. An attacker can abuse this by hosting a page on a domain whose subdomain matches the custom scheme of the application. This vulnerability is fixed in 2.10.3.</p> <p><strong>Affected:</strong> tauri-apps tauri</p> <p>Tauri is a framework for building binaries for all major desktop platforms. From 2.0 to 2.11.0, a flaw in Tauri&#39;s is_local_url() function causes it to incorrectly classify remote URLs as trusted local origins on Windows and Android. On these systems, Tauri maps custom URI scheme protocols to http://&lt;scheme&gt;.localhost/ because those platforms&#39; WebView implementations cannot serve custom URI schemes directly. The issue is that Tauri&#39;s check to see if the origin is local, only checks the first subdomain of the URL. An attacker can abuse this by hosting a page on a domain whose subdomain matches the custom scheme of the application. This vulnerability is fixed in 2.10.3.</p> https://cve.radiocsirt.org/vuln/cve-2026-42184