Skip to content

Update Rust crate tauri to v2.11.1 [SECURITY] - #1128

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/crate-tauri-vulnerability
Open

Update Rust crate tauri to v2.11.1 [SECURITY]#1128
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/crate-tauri-vulnerability

Conversation

@renovate

@renovate renovate Bot commented May 8, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
tauri (source) dependencies minor 2.9.5 → 2.11.1

Tauri has an Origin Confusion Issue that Allows Remote Pages to Invoke Local-Only IPC Commands

CVE-2026-42184 / GHSA-7gmj-67g7-phm9

More information

Details

Summary

A flaw in Tauri's is_local_url() function causes it to incorrectly classify remote URLs as trusted local origins on Windows and Android. On these systems, Tauri maps custom URI scheme protocols to http://<scheme>.localhost/ because those platforms' WebView implementations cannot serve custom URI schemes directly.

The issue is that Tauri's check to see if the origin is local, only checks the first subdomain of the URL. An attacker can abuse this by hosting a page on a domain whose subdomain matches the custom scheme of the application (e.g. http://app.attacker.com/)."

Example:

  • Local URL: app://localhost/ → on Android/Windows: http://app.localhost/
  • The check passes for any URL starting with http://app., including http://app.evil.com/

As a result, the attacker page can invoke backend commands that the developer intended to be accessible only to the app's own frontend and that are explicitly restricted from being called by external or remote origins.

Details

Vulnerable function:

#[cfg(any(windows, target_os = "android"))]
let local = {
  let protocol_url = self.manager().tauri_protocol_url(uses_https);
  let maybe_protocol = current_url
    .domain()
    .and_then(|d| d.split_once('.'))  // BUG: only splits on first dot
    .unwrap_or_default()
    .0;

  protocols.contains_key(maybe_protocol) && scheme == protocol_url.scheme()
};

Link: https://github.com/tauri-apps/tauri/blob/1ef6a119b1571d1da0acc08bdb7fd5521a4c6d52/crates/tauri/src/webview/mod.rs#L1680

split_once('.') discards everything after the first .. For http://app.evil.com/, the extracted label is app. If the application has registered a protocol named app, protocols.contains_key("app") returns true and the URL is classified as Origin::Local. The correct check must assert the full domain is exactly <protocol>.localhost.

PoC

We created a proof of concept app that can be found here. The app registers a custom app:// protocol and exposes a ping command restricted to local origins only. It provides a button to open a URL in a WebView, pre-filled with https://app.robbe-bc9.workers.dev/, an attacker-controlled page that invokes ping on load. Because the domain's first label matches the registered app protocol, is_local_url() classifies it as a local origin and the command succeeds.

capabilities/main.json contains the following code, which only exposes ping locally:

{
  "$schema": "../../../crates/tauri-schema-generator/schemas/capability.schema.json",
  "identifier": "main",
  "local": true,
  "windows": ["*"],
  "permissions": [
    "sample:allow-ping"
  ]
}

src/lib.rs contains the following code, to register a custom scheme:

tauri::Builder::default()
  .register_uri_scheme_protocol("app", |_ctx, _request| { ... })
Impact

The attacker page can invoke backend commands that the developer intended to be accessible only to the app's own frontend and that are explicitly restricted from being called by external or remote origins.

Severity

  • CVSS Score: 6.1 / 10 (Medium)
  • Vector String: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

Release Notes

tauri-apps/tauri (tauri)

v2.11.1: @​tauri-apps/api v2.11.1

Compare Source

PNPM Audit

 
No known vulnerabilities found

[2.11.1]

Enhancements
  • 916782601 (#​15520 by @​polw1) Document that Monitor.size, Monitor.position and Monitor.workArea are in physical pixels, with examples showing how to convert them to the logical pixels expected by window creation options via toLogical(monitor.scaleFactor).

PNPM Publish

 
> @&#8203;tauri-apps/api@2.11.1 npm-publish /home/runner/work/tauri/tauri/packages/api
> pnpm build && cd ./dist && pnpm publish --access public --loglevel silly --no-git-checks

> @&#8203;tauri-apps/api@2.11.1 build /home/runner/work/tauri/tauri/packages/api
> rollup -c --configPlugin typescript

�[36m
�[1m./src/app.ts, ./src/core.ts, ./src/dpi.ts, ./src/event.ts, ./src/image.ts, ./src/index.ts, ./src/menu.ts, ./src/mocks.ts, ./src/path.ts, ./src/tray.ts, ./src/webview.ts, ./src/webviewWindow.ts, ./src/window.ts�[22m → �[1m./dist, ./dist�[22m...�[39m
�[32mcreated �[1m./dist, ./dist�[22m in �[1m883ms�[22m�[39m
�[36m
�[1msrc/index.ts�[22m → �[1m../../crates/tauri/scripts/bundle.global.js�[22m...�[39m
�[32mcreated �[1m../../crates/tauri/scripts/bundle.global.js�[22m in �[1m1.4s�[22m�[39m
npm verbose cli /opt/hostedtoolcache/node/24.16.0/x64/bin/node /opt/hostedtoolcache/node/24.16.0/x64/bin/npm
npm info using npm@11.13.0
npm info using node@v24.16.0
npm silly config load:file:/opt/hostedtoolcache/node/24.16.0/x64/lib/node_modules/npm/npmrc
npm silly config load:file:/tmp/286e8dee195254a4370e608b672019b0/.npmrc
npm silly config load:file:/home/runner/.npmrc
npm silly config load:file:/home/runner/.config/pnpm/rc
npm verbose title npm publish tauri-apps-api-2.11.1.tgz
npm verbose argv "publish" "--ignore-scripts" "tauri-apps-api-2.11.1.tgz" "--access" "public" "--loglevel" "silly"
npm verbose logfile logs-max:10 dir:/home/runner/.npm/_logs/2026-06-17T13_41_23_851Z-
npm verbose logfile /home/runner/.npm/_logs/2026-06-17T13_41_23_851Z-debug-0.log
npm warn Unknown env config "verify-deps-before-run". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm warn Unknown env config "npm-globalconfig". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm warn Unknown env config "overrides". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm warn Unknown env config "_jsr-registry". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm silly logfile done cleaning log files
npm verbose publish [ 'tauri-apps-api-2.11.1.tgz' ]
npm http cache file:/tmp/286e8dee195254a4370e608b672019b0/tauri-apps-api-2.11.1.tgz 0ms (cache hit)
npm notice
npm notice 📦  @&#8203;tauri-apps/api@2.11.1
npm notice Tarball Contents
npm notice 99.3kB CHANGELOG.md
npm notice 10.2kB LICENSE_APACHE-2.0
npm notice 1.1kB LICENSE_MIT
npm notice 3.5kB README.md
npm notice 5.9kB app.cjs
npm notice 5.4kB app.d.ts
npm notice 5.5kB app.js
npm notice 11.2kB core.cjs
npm notice 6.5kB core.d.ts
npm notice 10.7kB core.js
npm notice 11.0kB dpi.cjs
npm notice 8.8kB dpi.d.ts
npm notice 10.8kB dpi.js
npm notice 5.8kB event.cjs
npm notice 4.9kB event.d.ts
npm notice 5.7kB event.js
npm notice 2.2kB external/tslib/tslib.es6.cjs
npm notice 2.2kB external/tslib/tslib.es6.js
npm notice 3.0kB image.cjs
npm notice 2.4kB image.d.ts
npm notice 2.9kB image.js
npm notice 738B index.cjs
npm notice 1.2kB index.d.ts
npm notice 669B index.js
npm notice 1.1kB menu.cjs
npm notice 451B menu.d.ts
npm notice 717B menu.js
npm notice 3.6kB menu/base.cjs
npm notice 887B menu/base.d.ts
npm notice 3.6kB menu/base.js
npm notice 2.2kB menu/checkMenuItem.cjs
npm notice 1.5kB menu/checkMenuItem.d.ts
npm notice 2.2kB menu/checkMenuItem.js
npm notice 7.4kB menu/iconMenuItem.cjs
npm notice 6.1kB menu/iconMenuItem.d.ts
npm notice 7.4kB menu/iconMenuItem.js
npm notice 5.1kB menu/menu.cjs
npm notice 4.4kB menu/menu.d.ts
npm notice 5.0kB menu/menu.js
npm notice 1.7kB menu/menuItem.cjs
npm notice 1.3kB menu/menuItem.d.ts
npm notice 1.6kB menu/menuItem.js
npm notice 1.1kB menu/predefinedMenuItem.cjs
npm notice 2.6kB menu/predefinedMenuItem.d.ts
npm notice 1.1kB menu/predefinedMenuItem.js
npm notice 7.1kB menu/submenu.cjs
npm notice 4.8kB menu/submenu.d.ts
npm notice 6.9kB menu/submenu.js
npm notice 9.8kB mocks.cjs
npm notice 5.0kB mocks.d.ts
npm notice 9.7kB mocks.js
npm notice 1.8kB package.json
npm notice 22.7kB path.cjs
npm notice 17.7kB path.d.ts
npm notice 21.7kB path.js
npm notice 7.1kB tray.cjs
npm notice 8.5kB tray.d.ts
npm notice 7.0kB tray.js
npm notice 20.7kB webview.cjs
npm notice 23.8kB webview.d.ts
npm notice 20.5kB webview.js
npm notice 8.4kB webviewWindow.cjs
npm notice 4.9kB webviewWindow.d.ts
npm notice 8.3kB webviewWindow.js
npm notice 68.1kB window.cjs
npm notice 64.9kB window.d.ts
npm notice 67.2kB window.js
npm notice Tarball Details
npm notice name: @&#8203;tauri-apps/api
npm notice version: 2.11.1
npm notice filename: tauri-apps-api-2.11.1.tgz
npm notice package size: 135.7 kB
npm notice unpacked size: 699.0 kB
npm notice shasum: cd6b13fc26403ca095a02e39ecdbec8048d2872d
npm notice integrity: sha512-M2FPuYND2m+wh[...]sUepJWugQCvAA==
npm notice total files: 67
npm notice
npm http fetch GET https://run-actions-1-azure-eastus.actions.githubusercontent.com/113//idtoken/***/***?api-version=2.0&audience=npm%3Aregistry.npmjs.org 200 76ms
npm http fetch POST 201 https://registry.npmjs.org/-/npm/v1/oidc/token/exchange/package/@&#8203;tauri-apps%2fapi 674ms
npm verbose oidc Successfully retrieved and set token
npm http fetch GET 200 https://registry.npmjs.org/@&#8203;tauri-apps%2fapi 54ms (cache miss)
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=1851797040
npm http fetch PUT 200 https://registry.npmjs.org/@&#8203;tauri-apps%2fapi 2070ms
+ @&#8203;tauri-apps/api@2.11.1
npm verbose cwd /tmp/286e8dee195254a4370e608b672019b0
npm verbose os Linux 6.17.0-1018-azure
npm verbose node v24.16.0
npm verbose npm  v11.13.0
npm verbose exit 0
npm info ok

v2.11.0: @​tauri-apps/cli v2.11.0

Compare Source

[2.11.0]

New Features

  • 926a57bb0 (#​15201) Added uninstaller icon and uninstaller header image support for NSIS installer.

    Notes:

    • For tauri-bundler lib users, the NsisSettings now has 2 new fields uninstaller_icon and uninstaller_header_image which can be a breaking change
    • When bundling with NSIS, users can add uninstallerIcon and uninstallerHeaderImage under bundle > windows > nsis to configure them.

  • 764b9139a (#​14313) Prompt to restart the Android emulator if it is not connected to adb.

  • 5dc2cee60 (#​14793) Added support for minimumWebview2Version option support for the MSI (Wix) installer, the old bundle > windows > nsis > minimumWebview2Version is now deprecated in favor of bundle > windows > minimumWebview2Version

    Notes:

    • For anyone relying on the WVRTINSTALLED Property tag in main.wxs, it is now renamed to INSTALLED_WEBVIEW2_VERSION
    • For tauri-bundler lib users, the WindowsSettings now has a new field minimum_webview2_version which can be a breaking change
Enhancements
Bug Fixes
  • fcb702ec4 (#​14954) Fix build --bundles to allow nsis arg in linux+macOS
  • 80c1425af (#​14921) Fix iOS build failure when Metal Toolchain is installed by using explicit $(DEVELOPER_DIR)/Toolchains/XcodeDefault.xctoolchain path instead of $(TOOLCHAIN_DIR) for Swift library search paths.
What's Changed
Dependencies
  • Upgraded to tauri-cli@2.11.0

v2.10.3: tauri v2.10.3

Compare Source

Cargo Audit

 
Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 941 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1052 crate dependencies)
Crate:     atk
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0413
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0413
Dependency tree:
atk 0.18.2
└── gtk 0.18.2
    ├── wry 0.54.0
    │   └── tauri-runtime-wry 2.10.1
    │       └── tauri 2.10.3
    │           ├── tauri-utils 2.8.3
    │           │   ├── tauri-schema-generator 0.0.0
    │           │   ├── tauri-runtime-wry 2.10.1
    │           │   ├── tauri-runtime 2.10.1
    │           │   │   ├── tauri-runtime-wry 2.10.1
    │           │   │   └── tauri 2.10.3
    │           │   ├── tauri-plugin 2.5.4
    │           │   │   ├── tauri-plugin-sample 0.1.0
    │           │   │   │   └── api 0.1.0
    │           │   │   └── tauri-plugin-log 2.6.0
    │           │   │       └── api 0.1.0
    │           │   ├── tauri-macros 2.5.5
    │           │   │   └── tauri 2.10.3
    │           │   ├── tauri-codegen 2.5.5
    │           │   │   ├── tauri-macros 2.5.5
    │           │   │   └── tauri-build 2.5.6
    │           │   │       ├── tauri-file-associations-demo 0.1.0
    │           │   │       ├── tauri 2.10.3
    │           │   │       ├── resources 0.1.0
    │           │   │       ├── bench_helloworld 0.1.0
    │           │   │       ├── bench_files_transfer 0.1.0
    │           │   │       ├── bench_cpu_intensive 0.1.0
    │           │   │       └── api 0.1.0
    │           │   ├── tauri-cli 2.10.1
    │           │   │   └── tauri-cli-node 0.0.0
    │           │   ├── tauri-bundler 2.8.1
    │           │   │   └── tauri-cli 2.10.1
    │           │   ├── tauri-build 2.5.6
    │           │   ├── tauri 2.10.3
    │           │   └── acl-tests 0.1.0
    │           ├── tauri-plugin-sample 0.1.0
    │           ├── tauri-plugin-log 2.6.0
    │           ├── tauri-file-associations-demo 0.1.0
    │           ├── tauri 2.10.3
    │           ├── restart 0.1.0
    │           ├── resources 0.1.0
    │           ├── bench_helloworld 0.1.0
    │           ├── bench_files_transfer 0.1.0
    │           ├── bench_cpu_intensive 0.1.0
    │           └── api 0.1.0
    ├── webkit2gtk 2.0.2
    │   ├── wry 0.54.0
    │   ├── tauri-runtime-wry 2.10.1
    │   ├── tauri-runtime 2.10.1
    │   └── tauri 2.10.3
    ├── tauri-runtime-wry 2.10.1
    ├── tauri-runtime 2.10.1
    ├── tauri 2.10.3
    ├── tao 0.34.5
    │   └── tauri-runtime-wry 2.10.1
    ├── muda 0.17.1
    │   ├── tray-icon 0.21.0
    │   │   └── tauri 2.10.3
    │   └── tauri 2.10.3
    └── libappindicator 0.9.0
        └── tray-icon 0.21.0

Crate:     atk-sys
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0416
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0416
Dependency tree:
atk-sys 0.18.2
├── gtk-sys 0.18.2
│   ├── webkit2gtk-sys 2.0.2
│   │   ├── wry 0.54.0
│   │   │   └── tauri-runtime-wry 2.10.1
│   │   │       └── tauri 2.10.3
│   │   │           ├── tauri-utils 2.8.3
│   │   │           │   ├── tauri-schema-generator 0.0.0
│   │   │           │   ├── tauri-runtime-wry 2.10.1
│   │   │           │   ├── tauri-runtime 2.10.1
│   │   │           │   │   ├── tauri-runtime-wry 2.10.1
│   │   │           │   │   └── tauri 2.10.3
│   │   │           │   ├── tauri-plugin 2.5.4
│   │   │           │   │   ├── tauri-plugin-sample 0.1.0
│   │   │           │   │   │   └── api 0.1.0
│   │   │           │   │   └── tauri-plugin-log 2.6.0
│   │   │           │   │       └── api 0.1.0
│   │   │           │   ├── tauri-macros 2.5.5
│   │   │           │   │   └── tauri 2.10.3
│   │   │           │   ├── tauri-codegen 2.5.5
│   │   │           │   │   ├── tauri-macros 2.5.5
│   │   │           │   │   └── tauri-build 2.5.6
│   │   │           │   │       ├── tauri-file-associations-demo 0.1.0
│   │   │           │   │       ├── tauri 2.10.3
│   │   │           │   │       ├── resources 0.1.0
│   │   │           │   │       ├── bench_helloworld 0.1.0
│   │   │           │   │       ├── bench_files_transfer 0.1.0
│   │   │           │   │       ├── bench_cpu_intensive 0.1.0
│   │   │           │   │       └── api 0.1.0
│   │   │           │   ├── tauri-cli 2.10.1
│   │   │           │   │   └── tauri-cli-node 0.0.0
│   │   │           │   ├── tauri-bundler 2.8.1
│   │   │           │   │   └── tauri-cli 2.10.1
│   │   │           │   ├── tauri-build 2.5.6
│   │   │           │   ├── tauri 2.10.3
│   │   │           │   └── acl-tests 0.1.0
│   │   │           ├── tauri-plugin-sample 0.1.0
│   │   │           ├── tauri-plugin-log 2.6.0
│   │   │           ├── tauri-file-associations-demo 0.1.0
│   │   │           ├── tauri 2.10.3
│   │   │           ├── restart 0.1.0
│   │   │           ├── resources 0.1.0
│   │   │           ├── bench_helloworld 0.1.0
│   │   │           ├── bench_files_transfer 0.1.0
│   │   │           ├── bench_cpu_intensive 0.1.0
│   │   │           └── api 0.1.0
│   │   └── webkit2gtk 2.0.2
│   │       ├── wry 0.54.0
│   │       ├── tauri-runtime-wry 2.10.1
│   │       ├── tauri-runtime 2.10.1
│   │       └── tauri 2.10.3
│   ├── webkit2gtk 2.0.2
│   ├── libappindicator-sys 0.9.0
│   │   └── libappindicator 0.9.0
│   │       └── tray-icon 0.21.0
│   │           └── tauri 2.10.3
│   ├── libappindicator 0.9.0
│   └── gtk 0.18.2
│       ├── wry 0.54.0
│       ├── webkit2gtk 2.0.2
│       ├── tauri-runtime-wry 2.10.1
│       ├── tauri-runtime 2.10.1
│       ├── tauri 2.10.3
│       ├── tao 0.34.5
│       │   └── tauri-runtime-wry 2.10.1
│       ├── muda 0.17.1
│       │   ├── tray-icon 0.21.0
│       │   └── tauri 2.10.3
│       └── libappindicator 0.9.0
└── atk 0.18.2
    └── gtk 0.18.2

Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057
Dependency tree:
fxhash 0.2.1
└── selectors 0.24.0
    └── kuchikiki 0.8.8-speedreader
        ├── wry 0.54.0
        │   └── tauri-runtime-wry 2.10.1
        │       └── tauri 2.10.3
        │           ├── tauri-utils 2.8.3
        │           │   ├── tauri-schema-generator 0.0.0
        │           │   ├── tauri-runtime-wry 2.10.1
        │           │   ├── tauri-runtime 2.10.1
        │           │   │   ├── tauri-runtime-wry 2.10.1
        │           │   │   └── tauri 2.10.3
        │           │   ├── tauri-plugin 2.5.4
        │           │   │   ├── tauri-plugin-sample 0.1.0
        │           │   │   │   └── api 0.1.0
        │           │   │   └── tauri-plugin-log 2.6.0
        │           │   │       └── api 0.1.0
        │           │   ├── tauri-macros 2.5.5
        │           │   │   └── tauri 2.10.3
        │           │   ├── tauri-codegen 2.5.5
        │           │   │   ├── tauri-macros 2.5.5
        │           │   │   └── tauri-build 2.5.6
        │           │   │       ├── tauri-file-associations-demo 0.1.0
        │           │   │       ├── tauri 2.10.3
        │           │   │       ├── resources 0.1.0
        │           │   │       ├── bench_helloworld 0.1.0
        │           │   │       ├── bench_files_transfer 0.1.0
        │           │   │       ├── bench_cpu_intensive 0.1.0
        │           │   │       └── api 0.1.0
        │           │   ├── tauri-cli 2.10.1
        │           │   │   └── tauri-cli-node 0.0.0
        │           │   ├── tauri-bundler 2.8.1
        │           │   │   └── tauri-cli 2.10.1
        │           │   ├── tauri-build 2.5.6
        │           │   ├── tauri 2.10.3
        │           │   └── acl-tests 0.1.0
        │           ├── tauri-plugin-sample 0.1.0
        │           ├── tauri-plugin-log 2.6.0
        │           ├── tauri-file-associations-demo 0.1.0
        │           ├── tauri 2.10.3
        │           ├── restart 0.1.0
        │           ├── resources 0.1.0
        │           ├── bench_helloworld 0.1.0
        │           ├── bench_files_transfer 0.1.0
        │           ├── bench_cpu_intensive 0.1.0
        │           └── api 0.1.0
        ├── tauri-utils 2.8.3
        └── tauri-cli 2.10.1

Crate:     gdk
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0412
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0412
Dependency tree:
gdk 0.18.2
├── webkit2gtk 2.0.2
│   ├── wry 0.54.0
│   │   └── tauri-runtime-wry 2.10.1
│   │       └── tauri 2.10.3
│   │           ├── tauri-utils 2.8.3
│   │           │   ├── tauri-schema-generator 0.0.0
│   │           │   ├── tauri-runtime-wry 2.10.1
│   │           │   ├── tauri-runtime 2.10.1
│   │           │   │   ├── tauri-runtime-wry 2.10.1
│   │           │   │   └── tauri 2.10.3
│   │           │   ├── tauri-plugin 2.5.4
│   │           │   │   ├── tauri-plugin-sample 0.1.0
│   │           │   │   │   └── api 0.1.0
│   │           │   │   └── tauri-plugin-log 2.6.0
│   │           │   │       └── api 0.1.0
│   │           │   ├── tauri-macros 2.5.5
│   │           │   │   └── tauri 2.10.3
│   │           │   ├── tauri-codegen 2.5.5
│   │           │   │   ├── tauri-macros 2.5.5
│   │           │   │   └── tauri-build 2.5.6
│   │           │   │       ├── tauri-file-associations-demo 0.1.0
│   │           │   │       ├── tauri 2.10.3
│   │           │   │       ├── resources 0.1.0
│   │           │   │       ├── bench_helloworld 0.1.0
│   │           │   │       ├── bench_files_transfer 0.1.0
│   │           │   │       ├── bench_cpu_intensive 0.1.0
│   │           │   │       └── api 0.1.0
│   │           │   ├── tauri-cli 2.10.1
│   │           │   │   └── tauri-cli-node 0.0.0
│   │           │   ├── tauri-bundler 2.8.1
│   │           │   │   └── tauri-cli 2.10.1
│   │           │   ├── tauri-build 2.5.6
│   │           │   ├── tauri 2.10.3
│   │           │   └── acl-tests 0.1.0
│   │           ├── tauri-plugin-sample 0.1.0
│   │           ├── tauri-plugin-log 2.6.0
│   │           ├── tauri-file-associations-demo 0.1.0
│   │           ├── tauri 2.10.3
│   │           ├── restart 0.1.0
│   │           ├── resources 0.1.0
│   │           ├── bench_helloworld 0.1.0
│   │           ├── bench_files_transfer 0.1.0
│   │           ├── bench_cpu_intensive 0.1.0
│   │           └── api 0.1.0
│   ├── tauri-runtime-wry 2.10.1
│   ├── tauri-runtime 2.10.1
│   └── tauri 2.10.3
├── gtk 0.18.2
│   ├── wry 0.54.0
│   ├── webkit2gtk 2.0.2
│   ├── tauri-runtime-wry 2.10.1
│   ├── tauri-runtime 2.10.1
│   ├── tauri 2.10.3
│   ├── tao 0.34.5
│   │   └── tauri-runtime-wry 2.10.1
│   ├── muda 0.17.1
│   │   ├── tray-icon 0.21.0
│   │   │   └── tauri 2.10.3
│   │   └── tauri 2.10.3
│   └── libappindicator 0.9.0
│       └── tray-icon 0.21.0
└── gdkx11 0.18.2
    └── wry 0.54.0

Crate:     gdk-sys
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0418
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0418
Dependency tree:
gdk-sys 0.18.2
├── webkit2gtk-sys 2.0.2
│   ├── wry 0.54.0
│   │   └── tauri-runtime-wry 2.10.1
│   │       └── tauri 2.10.3
│   │           ├── tauri-utils 2.8.3
│   │           │   ├── tauri-schema-generator 0.0.0
│   │           │   ├── tauri-runtime-wry 2.10.1
│   │           │   ├── tauri-runtime 2.10.1
│   │           │   │   ├── tauri-runtime-wry 2.10.1
│   │           │   │   └── tauri 2.10.3
│   │           │   ├── tauri-plugin 2.5.4
│   │           │   │   ├── tauri-plugin-sample 0.1.0
│   │           │   │   │   └── api 0.1.0
│   │           │   │   └── tauri-plugin-log 2.6.0
│   │           │   │       └── api 0.1.0
│   │           │   ├── tauri-macros 2.5.5
│   │           │   │   └── tauri 2.10.3
│   │           │   ├── tauri-codegen 2.5.5
│   │           │   │   ├── tauri-macros 2.5.5
│   │           │   │   └── tauri-build 2.5.6
│   │           │   │       ├── tauri-file-associations-demo 0.1.0
│   │           │   │       ├── tauri 2.10.3
│   │           │   │       ├── resources 0.1.0
│   │           │   │       ├── bench_helloworld 0.1.0
│   │           │   │       ├── bench_files_transfer 0.1.0
│   │           │   │       ├── bench_cpu_intensive 0.1.0
│   │           │   │       └── api 0.1.0
│   │           │   ├── tauri-cli 2.10.1
│   │           │   │   └── tauri-cli-node 0.0.0
│   │           │   ├── tauri-bundler 2.8.1
│   │           │   │   └── tauri-cli 2.10.1
│   │           │   ├── tauri-build 2.5.6
│   │           │   ├── tauri 2.10.3
│   │           │   └── acl-tests 0.1.0
│   │           ├── tauri-plugin-sample 0.1.0
│   │           ├── tauri-plugin-log 2.6.0
│   │           ├── tauri-file-associations-demo 0.1.0
│   │           ├── tauri 2.10.3
│   │           ├── restart 0.1.0
│   │           ├── resources 0.1.0
│   │           ├── bench_helloworld 0.1.0
│   │           ├── bench_files_transfer 0.1.0
│   │           ├── bench_cpu_intensive 0.1.0
│   │           └── api 0.1.0
│   └── webkit2gtk 2.0.2
│       ├── wry 0.54.0
│       ├── tauri-runtime-wry 2.10.1
│       ├── tauri-runtime 2.10.1
│       └── tauri 2.10.3
├── webkit2gtk 2.0.2
├── gtk-sys 0.18.2
│   ├── webkit2gtk-sys 2.0.2
│   ├── webkit2gtk 2.0.2
│   ├── libappindicator-sys 0.9.0
│   │   └── libappindicator 0.9.0
│   │       └── tray-icon 0.21.0
│   │           └── tauri 2.10.3
│   ├── libappindicator 0.9.0
│   └── gtk 0.18.2
│       ├── wry 0.54.0
│       ├── webkit2gtk 2.0.2
│       ├── tauri-runtime-wry 2.10.1
│       ├── tauri-runtime 2.10.1
│       ├── tauri 2.10.3
│       ├── tao 0.34.5
│       │   └── tauri-runtime-wry 2.10.1
│       ├── muda 0.17.1
│       │   ├── tray-icon 0.21.0
│       │   └── tauri 2.10.3
│       └── libappindicator 0.9.0
├── gdkx11-sys 0.18.2
│   ├── tao 0.34.5
│   └── gdkx11 0.18.2
│       └── wry 0.54.0
├── gdkwayland-sys 0.18.2
│   └── tao 0.34.5
└── gdk 0.18.2
    ├── webkit2gtk 2.0.2
    ├── gtk 0.18.2
    └── gdkx11 0.18.2

Crate:     gdkwayland-sys
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0411
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0411
Dependency tree:
gdkwayland-sys 0.18.2
└── tao 0.34.5
    └── tauri-runtime-wry 2.10.1
        └── tauri 2.10.3
            ├── tauri-utils 2.8.3
            │   ├── tauri-schema-generator 0.0.0
            │   ├── tauri-runtime-wry 2.10.1
            │   ├── tauri-runtime 2.10.1
            │   │   ├── tauri-runtime-wry 2.10.1
            │   │   └── tauri 2.10.3
            │   ├── tauri-plugin 2.5.4
            │   │   ├── tauri-plugin-sample 0.1.0
            │   │   │   └── api 0.1.0
            │   │   └── tauri-plugin-log 2.6.0
            │   │       └── api 0.1.0
            │   ├── tauri-macros 2.5.5
            │   │   └── tauri 2.10.3
            │   ├── tauri-codegen 2.5.5
            │   │   ├── tauri-macros 2.5.5
            │   │   └── tauri-build 2.5.6
            │   │       ├── tauri-file-associations-demo 0.1.0
            │   │       ├── tauri 2.10.3
            │   │       ├── resources 0.1.0
            │   │       ├── bench_helloworld 0.1.0
            │   │       ├── bench_files_transfer 0.1.0
            │   │       ├── bench_cpu_intensive 0.1.0
            │   │       └── api 0.1.0
            │   ├── tauri-cli 2.10.1
            │   │   └── tauri-cli-node 0.0.0
            │   ├── tauri-bundler 2.8.1
            │   │   └── tauri-cli 2.10.1
            │   ├── tauri-build 2.5.6
            │   ├── tauri 2.10.3
            │   └── acl-tests 0.1.0
            ├── tauri-plugin-sample 0.1.0
            ├── tauri-plugin-log 2.6.0
            ├── tauri-file-associations-demo 0.1.0
            ├── tauri 2.10.3
            ├── restart 0.1.0
            ├── resources 0.1.0
            ├── bench_helloworld 0.1.0
            ├── bench_files_transfer 0.1.0
            ├── bench_cpu_intensive 0.1.0
            └── api 0.1.0

Crate:     gdkx11
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0417
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0417
Dependency tree:
gdkx11 0.18.2
└── wry 0.54.0
    └── tauri-runtime-wry 2.10.1
        └── tauri 2.10.3
            ├── tauri-utils 2.8.3
            │   ├── tauri-schema-generator 0.0.0
            │   ├── tauri-runtime-wry 2.10.1
            │   ├── tauri-runtime 2.10.1
            │   │   ├── tauri-runtime-wry 2.10.1
            │   │   └── tauri 2.10.3
            │   ├── tauri-plugin 2.5.4
            │   │   ├── tauri-plugin-sample 0.1.0
            │   │   │   └── api 0.1.0
            │   │   └── tauri-plugin-log 2.6.0
            │   │       └── api 0.1.0
            │   ├── tauri-macros 2.5.5
            │   │   └── tauri 2.10.3
            │   ├── tauri-codegen 2.5.5
            │   │   ├── tauri-macros 2.5.5
            │   │   └── tauri-build 2.5.6
            │   │       ├── tauri-file-associations-demo 0.1.0
            │   │       ├── tauri 2.10.3
            │   │       ├── resources 0.1.0
            │   │       ├── bench_helloworld 0.1.0
            │   │       ├── bench_files_transfer 0.1.0
            │   │       ├── bench_cpu_intensive 0.1.0
            │   │       └── api 0.1.0
            │   ├── tauri-cli 2.10.1
            │   │   └── tauri-cli-node 0.0.0
            │   ├── tauri-bundler 2.8.1
            │   │   └── tauri-cli 2.10.1
            │   ├── tauri-build 2.5.6
            │   ├── tauri 2.10.3
            │   └── acl-tests 0.1.0
            ├── tauri-plugin-sample 0.1.0
            ├── tauri-plugin-log 2.6.0
            ├── tauri-file-associations-demo 0.1.0
            ├── tauri 2.10.3
            ├── restart 0.1.0
            ├── resources 0.1.0
            ├── bench_helloworld 0.1.0
            ├── bench_files_transfer 0.1.0
            ├── bench_cpu_intensive 0.1.0
            └── api 0.1.0

Crate:     gdkx11-sys
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0414
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0414
Dependency tree:
gdkx11-sys 0.18.2
├── tao 0.34.5
│   └── tauri-runtime-wry 2.10.1
│       └── tauri 2.10.3
│           ├── tauri-utils 2.8.3
│           │   ├── tauri-schema-generator 0.0.0
│           │   ├── tauri-runtime-wry 2.10.1
│           │   ├── tauri-runtime 2.10.1
│           │   │   ├── tauri-runtime-wry 2.10.1
│           │   │   └── tauri 2.10.3
│           │   ├── tauri-plugin 2.5.4
│           │   │   ├── tauri-plugin-sample 0.1.0
│           │   │   │   └── api 0.1.0
│           │   │   └── tauri-plugin-log 2.6.0
│           │   │       └── api 0.1.0
│           │   ├── tauri-macros 2.5.5
│           │   │   └── tauri 2.10.3
│           │   ├── tauri-codegen 2.5.5
│           │   │   ├── tauri-macros 2.5.5
│           │   │   └── tauri-build 2.5.6
│           │   │       ├── tauri-file-associations-demo 0.1.0
│           │   │       ├── tauri 2.10.3
│           │   │       ├── resources 0.1.0
│           │   │       ├── bench_helloworld 0.1.0
│           │   │       ├── bench_files_transfer 0.1.0
│           │   │       ├── bench_cpu_intensive 0.1.0
│           │   │       └── api 0.1.0
│           │   ├── tauri-cli 2.10.1
│           │   │   └── tauri-cli-node 0.0.0
│           │   ├── tauri-bundler 2.8.1
│           │   │   └── tauri-cli 2.10.1
│           │   ├── tauri-build 2.5.6
│           │   ├── tauri 2.10.3
│           │   └── acl-tests 0.1.0
│           ├── tauri-plugin-sample 0.1.0
│           ├── tauri-plugin-log 2.6.0
│           ├── tauri-file-associations-demo 0.1.0
│           ├── tauri 2.10.3
│           ├── restart 0.1.0
│           ├── resources 0.1.0
│           ├── bench_helloworld 0.1.0
│           ├── bench_files_transfer 0.1.0
│           ├── bench_cpu_intensive 0.1.0
│           └── api 0.1.0
└── gdkx11 0.18.2
    └── wry 0.54.0
        └── tauri-runtime-wry 2.10.1

Crate:     gtk
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0415
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0415
Dependency tree:
gtk 0.18.2
├── wry 0.54.0
│   └── tauri-runtime-wry 2.10.1
│       └── tauri 2.10.3
│           ├── tauri-utils 2.8.3
│           │   ├── tauri-schema-generator 0.0.0
│           │   ├── tauri-runtime-wry 2.10.1
│           │   ├── tauri-runtime 2.10.1
│           │   │   ├── tauri-runtime-wry 2.10.1
│           │   │   └── tauri 2.10.3
│           │   ├── tauri-plugin 2.5.4
│           │   │   ├── tauri-plugin-sample 0.1.0
│           │   │   │   └── api 0.1.0
│           │   │   └── tauri-plugin-log 2.6.0
│           │   │       └── api 0.1.0
│           │   ├── tauri-macros 2.5.5
│           │   │   └── tauri 2.10.3
│           │   ├── tauri-codegen 2.5.5
│           │   │   ├── tauri-macros 2.5.5
│           │   │   └── tauri-build 2.5.6
│           │   │       ├── tauri-file-associations-demo 0.1.0
│           │   │       ├── tauri 2.10.3
│           │   │       ├── resources 0.1.0
│           │   │       ├── bench_helloworld 0.1.0
│           │   │       ├── bench_files_transfer 0.1.0
│           │   │       ├── bench_cpu_intensive 0.1.0
│           │   │       └── api 0.1.0
│           │   ├── tauri-cli 2.10.1
│           │   │   └── tauri-cli-node 0.0.0
│           │   ├── tauri-bundler 2.8.1
│           │   │   └── tauri-cli 2.10.1
│           │   ├── tauri-build 2.5.6
│           │   ├── tauri 2.10.3
│           │   └── acl-tests 0.1.0
│           ├── tauri-plugin-sample 0.1.0
│           ├── tauri-plugin-log 2.6.0
│           ├── tauri-file-associations-demo 0.1.0
│           ├── tauri 2.10.3
│           ├── restart 0.1.0
│           ├── resources 0.1.0
│           ├── bench_helloworld 0.1.0
│           ├── bench_files_transfer 0.1.0
│           ├── bench_cpu_intensive 0.1.0
│           └── api 0.1.0
├── webkit2gtk 2.0.2
│   ├── wry 0.54.0
│   ├── tauri-runtime-wry 2.10.1
│   ├── tauri-runtime 2.10.1
│   └── tauri 2.10.3
├── tauri-runtime-wry 2.10.1
├── tauri-runtime 2.10.1
├── tauri 2.10.3
├── tao 0.34.5
│   └── tauri-runtime-wry 2.10.1
├── muda 0.17.1
│   ├── tray-icon 0.21.0
│   │   └── tauri 2.10.3
│   └── tauri 2.10.3
└── libappindicator 0.9.0
    └── tray-icon 0.21.0

Crate:     gtk-sys
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0420
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0420
Dependency tree:
gtk-sys 0.18.2
├── webkit2gtk-sys 2.0.2
│   ├── wry 0.54.0
│   │   └── tauri-runtime-wry 2.10.1
│   │       └── tauri 2.10.3
│   │           ├── tauri-utils 2.8.3
│   │           │   ├── tauri-schema-generator 0.0.0
│   │           │   ├── tauri-runtime-wry 2.10.1
│   │           │   ├── tauri-runtime 2.10.1
│   │           │   │   ├── tauri-runtime-wry 2.10.1
│   │           │   │   └── tauri 2.10.3
│   │           │   ├── tauri-plugin 2.5.4
│   │           │   │   ├── tauri-plugin-sample 0.1.0
│   │           │   │   │   └── api 0.1.0
│   │           │   │   └── tauri-plugin-log 2.6.0
│   │           │   │       └── api 0.1.0
│   │           │   ├── tauri-macros 2.5.5
│   │           │   │   └── tauri 2.10.3
│   │           │   ├── tauri-codegen 2.5.5
│   │           │   │   ├── tauri-macros 2.5.5
│   │           │   │   └── tauri-build 2.5.6
│   │           │   │       ├── tauri-file-associations-demo 0.1.0
│   │           │   │       ├── tauri 2.10.3
│   │           │   │       ├── resources 0.1.0
│   │           │   │       ├── bench_helloworld 0.1.0
│   │           │   │       ├── bench_files_transfer 0.1.0
│   │           │   │       ├── bench_cpu_intensive 0.1.0
│   │           │   │       └── api 0.1.0
│   │           │   ├── tauri-cli 2.10.1
│   │           │   │   └── tauri-cli-node 0.0.0
│   │           │   ├── tauri-bundler 2.8.1
│   │           │   │   └── tauri-cli 2.10.1
│   │           │   ├── tauri-build 2.5.6
│   │           │   ├── tauri 2.10.3
│   │           │   └── acl-tests 0.1.0
│   │           ├── tauri-plugin-sample 0.1.0
│   │           ├── tauri-plugin-log 2.6.0
│   │           ├── tauri-file-associations-demo 0.1.0
│   │           ├── tauri 2.10.3
│   │           ├── restart 0.1.0
│   │           ├── resources 0.1.0
│   │           ├── bench_helloworld 0.1.0
│   │           ├── bench_files_transfer 0.1.0
│   │           ├── bench_cpu_intensive 0.1.0
│   │           └── api 0.1.0
│   └── webkit2gtk 2.0.2
│       ├── wry 0.54.0
│       ├── tauri-runtime-wry 2.10.1
│       ├── tauri-runtime 2.10.1
│       └── tauri 2.10.3
├── webkit2gtk 2.0.2
├── libappindicator-sys 0.9.0
│   └── libappindicator 0.9.0
│       └── tray-icon 0.21.0
│           └── tauri 2.10.3
├── libappindicator 0.9.0
└── gtk 0.18.2
    ├── wry 0.54.0
    ├── webkit2gtk 2.0.2
    ├── tauri-runtime-wry 2.10.1
    ├── tauri-runtime 2.10.1
    ├── tauri 2.10.3
    ├── tao 0.34.5
    │   └── tauri-runtime-wry 2.10.1
    ├── muda 0.17.1
    │   ├── tray-icon 0.21.0
    │   └── tauri 2.10.3
    └── libappindicator 0.9.0

Crate:     gtk3-macros
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0419
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0419
Dependency tree:
gtk3-macros 0.18.2
└── gtk 0.18.2
    ├── wry 0.54.0
    │   └── tauri-runtime-wry 2.10.1
    │       └── tauri 2.10.3
    │           ├── tauri-utils 2.8.3
    │           │   ├── tauri-schema-generator 0.0.0
    │           │   ├── tauri-runtime-wry 2.10.1
    │           │   ├── tauri-runtime 2.10.1
    │           │   │   ├── tauri-runtime-wry 2.10.1
    │           │   │   └── tauri 2.10.3
    │           │   ├── tauri-plugin 2.5.4
    │           │   │   ├── tauri-plugin-sample 0.1.0
    │           │   │   │   └── api 0.1.0
    │           │   │   └── tauri-plugin-log 2.6.0
    │           │   │       └── api 0.1.0
    │           │   ├── tauri-macros 2.5.5
    │           │   │   └── tauri 2.10.3
    │           │   ├── tauri-codegen 2.5.5
    │           │   │   ├── tauri-macros 2.5.5
    │           │   │   └── tauri-build 2.5.6
    │           │   │       ├── tauri-file-associations-demo 0.1.0
    │           │   │       ├── tauri 2.10.3
    │           │   │       ├── resources 0.1.0
    │           │   │       ├── bench_helloworld 0.1.0
    │           │   │       ├── bench_files_transfer 0.1.0
    │           │   │       ├── bench_cpu_intensive 0.1.0
    │           │   │       └── api 0.1.0
    │           │   ├── tauri-cli 2.10.1
    │           │   │   └── tauri-cli-node 0.0.0
    │           │   ├── tauri-bundler 2.8.1
    │           │   │   └── tauri-cli 2.10.1
    │           │   ├── tauri-build 2.5.6
    │           │   ├── tauri 2.10.3
    │           │   └── acl-tests 0.1.0
    │           ├── tauri-plugin-sample 0.1.0
    │           ├── tauri-plugin-log 2.6.0
    │           ├── tauri-file-associations-demo 0.1.0
    │           ├── tauri 2.10.3
    │           ├── restart 0.1.0
    │           ├── resources 0.1.0
    │           ├── bench_helloworld 0.1.0
    │           ├── bench_files_transfer 0.1.0
    │           ├── bench_cpu_intensive 0.1.0
    │           └── api 0.1.0
    ├── webkit2gtk 2.0.2
    │   ├── wry 0.54.0
    │   ├── tauri-runtime-wry 2.10.1
    │   ├── tauri-runtime 2.10.1
    │   └── tauri 2.10.3
    ├── tauri-runtime-wry 2.10.1
    ├── tauri-runtime 2.10.1
    ├── tauri 2.10.3
    ├── tao 0.34.5
    │   └── tauri-runtime-wry 2.10.1
    ├── muda 0.17.1
    │   ├── tray-icon 0.21.0
    │   │   └── tauri 2.10.3
    │   └── tauri 2.10.3
    └── libappindicator 0.9.0
        └── tray-icon 0.21.0

Crate:     paste
Version:   1.0.15
Warning:   unmaintained
Title:     paste - no longer maintained
Date:      2024-10-07
ID:        RUSTSEC-2024-0436
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436
Dependency tree:
paste 1.0.15
├── specta 2.0.0-rc.20
│   └── tauri 2.10.3
│       ├── tauri-utils 2.8.3
│       │   ├── tauri-schema-generator 0.0.0
│       │   ├── tauri-runtime-wry 2.10.1
│       │   │   └── tauri 2.10.3
│       │   ├── tauri-runtime 2.10.1
│       │   │   ├── tauri-runtime-wry 2.10.1
│       │   │   └── tauri 2.10.3
│       │   ├── tauri-plugin 2.5.4
│       │   │   ├── tauri-plugin-sample 0.1.0
│       │   │   │   └── api 0.1.0
│       │   │   └── tauri-plugin-log 2.6.0
│       │   │       └── api 0.1.0
│       │   ├── tauri-macros 2.5.5
│       │   │   └── tauri 2.10.3
│       │   ├── tauri-codegen 2.5.5
│       │   │   ├── tauri-macros 2.5.5
│       │   │   └── tauri-build 2.5.6
│       │   │       ├── tauri-file-associations-demo 0.1.0
│       │   │       ├── tauri 2.10.3
│       │   │       ├── resources 0.1.0
│       │   │       ├── bench_helloworld 0.1.0
│       │   │       ├── bench_files_transfer 0.1.0
│       │   │       ├── bench_cpu_intensive 0.1.0
│       │   │       └── api 0.1.0
│       │   ├── tauri-cli 2.10.1
│       │   │   └── tauri-cli-node 0.0.0
│       │   ├── tauri-bundler 2.8.1
│       │   │   └── tauri-cli 2.10.1
│       │   ├── tauri-build 2.5.6
│       │   ├── tauri 2.10.3
│       │   └── acl-tests 0.1.0
│       ├── tauri-plugin-sample 0.1.0
│       ├── tauri-plugin-log 2.6.0
│       ├── tauri-file-associations-demo 0.1.0
│       ├── tauri 2.10.3
│       ├── restart 0.1.0
│       ├── resources 0.1.0
│       ├── bench_helloworld 0.1.0
│       ├── bench_files_transfer 0.1.0
│       ├── bench_cpu_intensive 0.1.0
│       └── api 0.1.0
└── rav1e 0.7.1
    └── ravif 0.11.11
        └── image 0.25.5
            ├── tauri-cli 2.10.1
            ├── tauri-bundler 2.8.1
            └── tauri 2.10.3

Crate:     rustls-pemfile
Version:   1.0.4
Warning:   unmaintained
Title:     rustls-pemfile is unmaintained
Date:      2025-11-28
ID:        RUSTSEC-2025-0134
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0134
Dependency tree:
rustls-pemfile 1.0.4
├── rustls-native-certs 0.6.3
│   └── reqwest 0.11.27
│       ├── cryptographic-message-syntax 0.26.0
│       │   ├── apple-xar 0.18.0
│       │   │   ├── apple-flat-package 0.18.0
│       │   │   │   └── apple-codesign 0.27.0
│       │   │   │       └── tauri-macos-sign 2.3.3
│       │   │   │           ├── tauri-cli 2.10.1
│       │   │   │           │   └── tauri-cli-node 0.0.0
│       │   │   │           └── tauri-bundler 2.8.1
│       │   │   │               └── tauri-cli 2.10.1
│       │   │   └── apple-codesign 0.27.0
│       │   └── apple-codesign 0.27.0
│       ├── apple-xar 0.18.0
│       └── apple-codesign 0.27.0
└── reqwest 0.11.27

Crate:     rustls-pemfile
Version:   2.2.0
Warning:   unmaintained
Title:     rustls-pemfile is unmaintained
Date:      2025-11-28
ID:        RUSTSEC-2025-0134
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0134
Dependency tree:
rustls-pemfile 2.2.0
└── rustls-native-certs 0.7.3
    └── tungstenite 0.21.0
        └── apple-codesign 0.27.0
            └── tauri-macos-sign 2.3.3
                ├── tauri-cli 2.10.1
                │   └── tauri-cli-node 0.0.0
                └── tauri-bundler 2.8.1
                    └── tauri-cli 2.10.1

Crate:     unic-char-property
Version:   0.9.0
Warning:   unmaintained
Title:     `unic-char-property` is unmaintained
Date:      2025-10-18
ID:        RUSTSEC-2025-0081
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0081
Dependency tree:
unic-char-property 0.9.0
└── unic-ucd-ident 0.9.0
    └── urlpattern 0.3.0
        └── tauri-utils 2.8.3
            ├── tauri-schema-generator 0.0.0
            ├── tauri-runtime-wry 2.10.1
            │   └── tauri 2.10.3
            │       ├── tauri-utils 2.8.3
            │       ├── tauri-plugin-sample 0.1.0
            │       │   └── api 0.1.0
            │       ├── tauri-plugin-log 2.6.0
            │       │   └── api 0.1.0
            │       ├── tauri-file-associations-demo 0.1.0
            │       ├── tauri 2.10.3
            │       ├── restart 0.1.0
            │       ├── resources 0.1.0
            │       ├── bench_helloworld 0.1.0
            │       ├── bench_files_transfer 0.1.0
            │       ├── bench_cpu_intensive 0.1.0
            │       └── api 0.1.0
            ├── tauri-runtime 2.10.1
            │   ├── tauri-runtime-wry 2.10.1
            │   └── tauri 2.10.3
            ├── tauri-plugin 2.5.4
            │   ├── tauri-plugin-sample 0.1.0
            │   └── tauri-plugin-log 2.6.0
            ├── tauri-macros 2.5.5
            │   └── tauri 2.10.3
            ├── tauri-codegen 2.5.5
            │   ├── tauri-macros 2.5.5
            │   └── tauri-build 2.5.6
            │       ├── tauri-file-associations-demo 0.1.0
            │       ├── tauri 2.10.3
            │       ├── resources 0.1.0
            │       ├── bench_helloworld 0.1.0
            │       ├── bench_files_transfer 0.1.0
            │       ├── bench_cpu_intensive 0.1.0
            │       └── api 0.1.0
            ├── tauri-cli 2.10.1
            │   └── tauri-cli-node 0.0.0
            ├── tauri-bundler 2.8.1
            │   └── tauri-cli 2.10.1
            ├── tauri-build 2.5.6
            ├── tauri 2.10.3
            └── acl-tests 0.1.0

Crate:     unic-char-range
Version:   0.9.0
Warning:   unmaintained
Title:     `unic-char-range` is unmaintained
Date:      2025-10-18
ID:        RUSTSEC-2025-0075
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0075
Dependency tree:
unic-char-range 0.9.0
├── unic-ucd-ident 0.9.0
│   └── urlpattern 0.3.0
│       └── tauri-utils 2.8.3
│           ├── tauri-schema-generator 0.0.0
│           ├── tauri-runtime-wry 2.10.1
│           │   └── tauri 2.10.3
│           │       ├── tauri-utils 2.8.3
│           │       ├── tauri-plugin-sample 0.1.0
│           │       │   └── api 0.1.0
│           │       ├── tauri-plugin-log 2.6.0
│           │       │   └── api 0.1.0
│           │       ├── tauri-file-associations-demo 0.1.0
│           │       ├── tauri 2.10.3
│           │       ├── restart 0.1.0
│           │       ├── resources 0.1.0
│           │       ├── bench_helloworld 0.1.0
│           │       ├── bench_files_transfer 0.1.0
│           │       ├── bench_cpu_intensive 0.1.0
│           │       └── api 0.1.0
│           ├── tauri-runtime 2.10.1
│           │   ├── tauri-runtime-wry 2.10.1
│           │   └── tauri 2.10.3
│           ├── tauri-plugin 2.5.4
│           │   ├── tauri-plugin-sample 0.1.0
│           │   └── tauri-plugin-log 2.6.0
│           ├── tauri-macros 2.5.5
│           │   └── tauri 2.10.3
│           ├── tauri-codegen 2.5.5
│           │   ├── tauri-macros 2.5.5
│           │   └── tauri-build 2.5.6
│           │       ├── tauri-file-associations-demo 0.1.0
│           │       ├── tauri 2.10.3
│           │       ├── resources 0.1.0
│           │       ├── bench_helloworld 0.1.0
│           │       ├── bench_files_transfer 0.1.0
│           │       ├── bench_cpu_intensive 0.1.0
│           │       └── api 0.1.0
│           ├── tauri-cli 2.10.1
│           │   └── tauri-cli-node 0.0.0
│           ├── tauri-bundler 2.8.1
│           │   └── tauri-cli 2.10.1
│           ├── tauri-build 2.5.6
│           ├── tauri 2.10.3
│           └── acl-tests 0.1.0
└── unic-char-property 0.9.0
    └── unic-ucd-ident 0.9.0

Crate:     unic-common
Version:   0.9.0
Warning:   unmaintained
Title:     `unic-common` is unmaintained
Date:      2025-10-18
ID:        RUSTSEC-2025-0080
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0080
Dependency tree:
unic-common 0.9.0
└── unic-ucd-version 0.9.0
    └── unic-ucd-ident 0.9.0
        └── urlpattern 0.3.0
            └── tauri-utils 2.8.3
                ├── tauri-schema-generator 0.0.0
                ├── tauri-runtime-wry 2.10.1
                │   └── tauri 2.10.3
                │       ├── tauri-utils 2.8.3
                │       ├── tauri-plugin-sample 0.1.0
                │       │   └── api 0.1.0
                │       ├── tauri-plugin-log 2.6.0
                │       │   └── api 0.1.0
                │       ├── tauri-file-associations-demo 0.1.0
                │       ├── tauri 2.10.3
                │       ├── restart 0.1.0
                │       ├── resources 0.1.0
                │       ├── bench_helloworld 0.1.0
                │       ├── bench_files_transfer 0.1.0
                │       ├── bench_cpu_intensive 0.1.0
                │       └── api 0.1.0
                ├── tauri-runtime 2.10.1
                │   ├── tauri-runtime-wry 2.10.1
                │   └── tauri 2.10.3
                ├── tauri-plugin 2.5.4
                │   ├── tauri-plugin-sample 0.1.0
                │   └── tauri-plugin-log 2.6.0
                ├── tauri-macros 2.5.5
                │   └── tauri 2.10.3
                ├── tauri-codegen 2.5.5
                │   ├── tauri-macros 2.5.5
                │   └── tauri-build 2.5.6
                │       ├── tauri-file-associations-demo 0.1.0
                │       ├── tauri 2.10.3
                │       ├── resources 0.1.0
                │       ├── bench_helloworld 0.1.0
                │       ├── bench_files_transfer 0.1.0
                │       ├── bench_cpu_intensive 0.1.0
                │       └── api 0.1.0
                ├── tauri-cli 2.10.1
                │   └── tauri-cli-node 0.0.0
                ├── tauri-bundler 2.8.1
                │   └── tauri-cli 2.10.1
                ├── tauri-build 2.5.6
                ├── tauri 2.10.3
                └── acl-tests 0.1.0

Crate:     unic-ucd-ident
Version:   0.9.0
Warning:   unmaintained
Title:     `unic-ucd-ident` is unmaintained
Date:      2025-10-18
ID:        RUSTSEC-2025-0100
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0100
Dependency tree:
unic-ucd-ident 0.9.0
└── urlpattern 0.3.0
    └── tauri-utils 2.8.3
        ├── tauri-schema-generator 0.0.0
        ├── tauri-runtime-wry 2.10.1
        │   └── tauri 2.10.3
        │       ├── tauri-utils 2.8.3
        │       ├── tauri-plugin-sample 0.1.0
        │       │   └── api 0.1.0
        │       ├── tauri-plugin-log 2.6.0
        │       │   └── api 0.1.0
        │       ├── tauri-file-associations-demo 0.1.0
        │       ├── tauri 2.10.3
        │       ├── restart 0.1.0
        │       ├── resources 0.1.0
        │       ├── bench_helloworld 0.1.0
        │       ├── bench_files_transfer 0.1.0
        │       ├── bench_cpu_intensive 0.1.0
        │       └── api 0.1.0
        ├── tauri-runtime 2.10.1
        │   ├── tauri-runtime-wry 2.10.1
        │   └── tauri 2.10.3
        ├── tauri-plugin 2.5.4
        │   ├── tauri-plugin-sample 0.1.0
        │   └── tauri-plugin-log 2.6.0
        ├── tauri-macros 2.5.5
        │   └── tauri 2.10.3
        ├── tauri-codegen 2.5.5
        │   ├── tauri-macros 2.5.5
        │   └── tauri-build 2.5.6
        │       ├── tauri-file-associations-demo 0.1.0
        │       ├── tauri 2.10.3
        │       ├── resources 0.1.0
        │       ├── bench_helloworld 0.1.0
        │       ├── bench_files_transfer 0.1.0
        │       ├── bench_cpu_intensive 0.1.0
        │       └── api 0.1.0
        ├── tauri-cli 2.10.1
        │   └── tauri-cli-node 0.0.0
        ├── tauri-bundler 2.8.1
        │   └── tauri-cli 2.10.1
        ├── tauri-build 2.5.6
        ├── tauri 2.10.3
        └── acl-tests 0.1.0

Crate:     unic-ucd-version
Version:   0.9.0
Warning:   unmaintained
Title:     `unic-ucd-version` is unmaintained
Date:      2025-10-18
ID:        RUSTSEC-2025-0098
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0098
Dependency tree:
unic-ucd-version 0.9.0
└── unic-ucd-ident 0.9.0
    └── urlpattern 0.3.0
        └── tauri-utils 2.8.3
            ├── tauri-schema-generator 0.0.0
            ├── tauri-runtime-wry 2.10.1
            │   └── tauri 2.10.3
            │       ├── tauri-utils 2.8.3
            │       ├── tauri-plugin-sample 0.1.0
            │       │   └── api 0.1.0
            │       ├── tauri-plugin-log 2.6.0
            │       │   └── api 0.1.0
            │       ├── tauri-file-associations-demo 0.1.0
            │       ├── tauri 2.10.3
            │       ├── restart 0.1.0
            │       ├── resources 0.1.0
            │       ├── bench_helloworld 0.1.0
            │       ├── bench_files_transfer 0.1.0
            │       ├── bench_cpu_intensive 0.1.0
            │       └── api 0.1.0
            ├── tauri-runtime 2.10.1
            │   ├── tauri-runtime-wry 2.10.1
            │   └── tauri 2.10.3
            ├── tauri-plugin 2.5.4
            │   ├── tauri-plugin-sample 0.1.0
            │   └── tauri-plugin-log 2.6.0
            ├── tauri-macros 2.5.5
            │   └── tauri 2.10.3
            ├── tauri-codegen 2.5.5
            │   ├── tauri-macros 2.5.5
            │   └── tauri-build 2.5.6
            │       ├── tauri-file-associations-demo 0.1.0
            │       ├── tauri 2.10.3
            │       ├── resources 0.1.0
            │       ├── bench_helloworld 0.1.0
            │       ├── bench_files_transfer 0.1.0
            │       ├── bench_cpu_intensive 0.1.0
            │       └── api 0.1.0
            ├── tauri-cli 2.10.1
            │   └── tauri-cli-node 0.0.0
            ├── tauri-bundler 2.8.1
            │   └── tauri-cli 2.10.1
            ├── tauri-build 2.5.6
            ├── tauri 2.10.3
            └── acl-tests 0.1.0

Crate:     glib
Version:   0.18.5
Warning:   unsound
Title:     Unsoundness in `Iterator` and `DoubleEndedIterator` impls for `glib::VariantStrIter`
Date:      2024-03-30
ID:        RUSTSEC-2024-0429
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0429
Dependency tree:
glib 0.18.5
├── webkit2gtk 2.0.2
│   ├── wry 0.54.0
│   │   └── tauri-runtime-wry 2.10.1
│   │       └── tauri 2.10.3
│   │           ├── tauri-utils 2.8.3
│   │           │   ├── tauri-schema-generator 0.0.0
│   │           │   ├── tauri-runtime-wry 2.10.1
│   │           │   ├── tauri-runtime 2.10.1
│   │           │   │   ├── tauri-ru

> ✂ **Note**
> 
> PR body was truncated to here.


</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/arturh85/factorio-bot).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI3Mi40IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=-->

@renovate
renovate Bot force-pushed the renovate/crate-tauri-vulnerability branch from 57c4637 to b51f02f Compare May 18, 2026 11:06
@renovate
renovate Bot force-pushed the renovate/crate-tauri-vulnerability branch from b51f02f to 4a5ec39 Compare July 20, 2026 23:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants