Update Rust crate tauri to v2.11.1 [SECURITY] by renovate[bot] · Pull Request #11 · Gabo-Tech/ChatGPT-Multiplatform-Desktop-Wrapper

renovate · 2026-05-08T19:28:48Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
tauri (source)	dependencies	minor	`2.2.2` → `2.11.1`

Tauri has an Origin Confusion Issue that Allows Remote Pages to Invoke Local-Only IPC Commands

CVE-2026-42184 / GHSA-7gmj-67g7-phm9

More information

Details

Summary

A flaw in Tauri's is_local_url() function causes it to incorrectly classify remote URLs as trusted local origins on Windows and Android. On these systems, Tauri maps custom URI scheme protocols to http://<scheme>.localhost/ because those platforms' WebView implementations cannot serve custom URI schemes directly.

The issue is that Tauri's check to see if the origin is local, only checks the first subdomain of the URL. An attacker can abuse this by hosting a page on a domain whose subdomain matches the custom scheme of the application (e.g. http://app.attacker.com/)."

Example:

Local URL: app://localhost/ → on Android/Windows: http://app.localhost/
The check passes for any URL starting with http://app., including http://app.evil.com/

As a result, the attacker page can invoke backend commands that the developer intended to be accessible only to the app's own frontend and that are explicitly restricted from being called by external or remote origins.

Details

Vulnerable function:

#[cfg(any(windows, target_os = "android"))]
let local = {
  let protocol_url = self.manager().tauri_protocol_url(uses_https);
  let maybe_protocol = current_url
    .domain()
    .and_then(|d| d.split_once('.'))  // BUG: only splits on first dot
    .unwrap_or_default()
    .0;

  protocols.contains_key(maybe_protocol) && scheme == protocol_url.scheme()
};

Link: https://github.com/tauri-apps/tauri/blob/1ef6a119b1571d1da0acc08bdb7fd5521a4c6d52/crates/tauri/src/webview/mod.rs#L1680

split_once('.') discards everything after the first .. For http://app.evil.com/, the extracted label is app. If the application has registered a protocol named app, protocols.contains_key("app") returns true and the URL is classified as Origin::Local. The correct check must assert the full domain is exactly <protocol>.localhost.

PoC

We created a proof of concept app that can be found here. The app registers a custom app:// protocol and exposes a ping command restricted to local origins only. It provides a button to open a URL in a WebView, pre-filled with https://app.robbe-bc9.workers.dev/, an attacker-controlled page that invokes ping on load. Because the domain's first label matches the registered app protocol, is_local_url() classifies it as a local origin and the command succeeds.

capabilities/main.json contains the following code, which only exposes ping locally:

{
  "$schema": "../../../crates/tauri-schema-generator/schemas/capability.schema.json",
  "identifier": "main",
  "local": true,
  "windows": ["*"],
  "permissions": [
    "sample:allow-ping"
  ]
}

src/lib.rs contains the following code, to register a custom scheme:

tauri::Builder::default()
  .register_uri_scheme_protocol("app", |_ctx, _request| { ... })

Impact

The attacker page can invoke backend commands that the developer intended to be accessible only to the app's own frontend and that are explicitly restricted from being called by external or remote origins.

Severity

CVSS Score: 6.1 / 10 (Medium)
Vector String: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

Release Notes

tauri-apps/tauri (tauri)

`v2.11.1`: @tauri-apps/cli v2.11.1

Compare Source

[2.11.1]

Dependencies

Upgraded to tauri-cli@2.11.1

`v2.11.0`: @tauri-apps/cli v2.11.0

Compare Source

[2.11.0]

New Features

926a57bb0 (#15201) Added uninstaller icon and uninstaller header image support for NSIS installer.

Notes:
- For tauri-bundler lib users, the NsisSettings now has 2 new fields uninstaller_icon and uninstaller_header_image which can be a breaking change
- When bundling with NSIS, users can add uninstallerIcon and uninstallerHeaderImage under bundle > windows > nsis to configure them.
764b9139a (#14313) Prompt to restart the Android emulator if it is not connected to adb.
5dc2cee60 (#14793) Added support for minimumWebview2Version option support for the MSI (Wix) installer, the old bundle > windows > nsis > minimumWebview2Version is now deprecated in favor of bundle > windows > minimumWebview2Version

Notes:
- For anyone relying on the WVRTINSTALLED Property tag in main.wxs, it is now renamed to INSTALLED_WEBVIEW2_VERSION
- For tauri-bundler lib users, the WindowsSettings now has a new field minimum_webview2_version which can be a breaking change

Enhancements

be0e4bd2d (#15218) Added Vietnamese translations for the NSIS installer
8718d0816 (#15033) Show the context before prompting for updater signing key password

Bug Fixes

fcb702ec4 (#14954) Fix build --bundles to allow nsis arg in linux+macOS
80c1425af (#14921) Fix iOS build failure when Metal Toolchain is installed by using explicit $(DEVELOPER_DIR)/Toolchains/XcodeDefault.xctoolchain path instead of $(TOOLCHAIN_DIR) for Swift library search paths.

What's Changed

9979cde1c (#15175) Update NSIS installer Italian translations

Dependencies

Upgraded to tauri-cli@2.11.0

`v2.10.3`: tauri v2.10.3

Compare Source

Cargo Audit

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 941 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (1052 crate dependencies)
Crate:     atk
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0413
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0413
Dependency tree:
atk 0.18.2
└── gtk 0.18.2
    ├── wry 0.54.0
    │   └── tauri-runtime-wry 2.10.1
    │       └── tauri 2.10.3
    │           ├── tauri-utils 2.8.3
    │           │   ├── tauri-schema-generator 0.0.0
    │           │   ├── tauri-runtime-wry 2.10.1
    │           │   ├── tauri-runtime 2.10.1
    │           │   │   ├── tauri-runtime-wry 2.10.1
    │           │   │   └── tauri 2.10.3
    │           │   ├── tauri-plugin 2.5.4
    │           │   │   ├── tauri-plugin-sample 0.1.0
    │           │   │   │   └── api 0.1.0
    │           │   │   └── tauri-plugin-log 2.6.0
    │           │   │       └── api 0.1.0
    │           │   ├── tauri-macros 2.5.5
    │           │   │   └── tauri 2.10.3
    │           │   ├── tauri-codegen 2.5.5
    │           │   │   ├── tauri-macros 2.5.5
    │           │   │   └── tauri-build 2.5.6
    │           │   │       ├── tauri-file-associations-demo 0.1.0
    │           │   │       ├── tauri 2.10.3
    │           │   │       ├── resources 0.1.0
    │           │   │       ├── bench_helloworld 0.1.0
    │           │   │       ├── bench_files_transfer 0.1.0
    │           │   │       ├── bench_cpu_intensive 0.1.0
    │           │   │       └── api 0.1.0
    │           │   ├── tauri-cli 2.10.1
    │           │   │   └── tauri-cli-node 0.0.0
    │           │   ├── tauri-bundler 2.8.1
    │           │   │   └── tauri-cli 2.10.1
    │           │   ├── tauri-build 2.5.6
    │           │   ├── tauri 2.10.3
    │           │   └── acl-tests 0.1.0
    │           ├── tauri-plugin-sample 0.1.0
    │           ├── tauri-plugin-log 2.6.0
    │           ├── tauri-file-associations-demo 0.1.0
    │           ├── tauri 2.10.3
    │           ├── restart 0.1.0
    │           ├── resources 0.1.0
    │           ├── bench_helloworld 0.1.0
    │           ├── bench_files_transfer 0.1.0
    │           ├── bench_cpu_intensive 0.1.0
    │           └── api 0.1.0
    ├── webkit2gtk 2.0.2
    │   ├── wry 0.54.0
    │   ├── tauri-runtime-wry 2.10.1
    │   ├── tauri-runtime 2.10.1
    │   └── tauri 2.10.3
    ├── tauri-runtime-wry 2.10.1
    ├── tauri-runtime 2.10.1
    ├── tauri 2.10.3
    ├── tao 0.34.5
    │   └── tauri-runtime-wry 2.10.1
    ├── muda 0.17.1
    │   ├── tray-icon 0.21.0
    │   │   └── tauri 2.10.3
    │   └── tauri 2.10.3
    └── libappindicator 0.9.0
        └── tray-icon 0.21.0

Crate:     atk-sys
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0416
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0416
Dependency tree:
atk-sys 0.18.2
├── gtk-sys 0.18.2
│   ├── webkit2gtk-sys 2.0.2
│   │   ├── wry 0.54.0
│   │   │   └── tauri-runtime-wry 2.10.1
│   │   │       └── tauri 2.10.3
│   │   │           ├── tauri-utils 2.8.3
│   │   │           │   ├── tauri-schema-generator 0.0.0
│   │   │           │   ├── tauri-runtime-wry 2.10.1
│   │   │           │   ├── tauri-runtime 2.10.1
│   │   │           │   │   ├── tauri-runtime-wry 2.10.1
│   │   │           │   │   └── tauri 2.10.3
│   │   │           │   ├── tauri-plugin 2.5.4
│   │   │           │   │   ├── tauri-plugin-sample 0.1.0
│   │   │           │   │   │   └── api 0.1.0
│   │   │           │   │   └── tauri-plugin-log 2.6.0
│   │   │           │   │       └── api 0.1.0
│   │   │           │   ├── tauri-macros 2.5.5
│   │   │           │   │   └── tauri 2.10.3
│   │   │           │   ├── tauri-codegen 2.5.5
│   │   │           │   │   ├── tauri-macros 2.5.5
│   │   │           │   │   └── tauri-build 2.5.6
│   │   │           │   │       ├── tauri-file-associations-demo 0.1.0
│   │   │           │   │       ├── tauri 2.10.3
│   │   │           │   │       ├── resources 0.1.0
│   │   │           │   │       ├── bench_helloworld 0.1.0
│   │   │           │   │       ├── bench_files_transfer 0.1.0
│   │   │           │   │       ├── bench_cpu_intensive 0.1.0
│   │   │           │   │       └── api 0.1.0
│   │   │           │   ├── tauri-cli 2.10.1
│   │   │           │   │   └── tauri-cli-node 0.0.0
│   │   │           │   ├── tauri-bundler 2.8.1
│   │   │           │   │   └── tauri-cli 2.10.1
│   │   │           │   ├── tauri-build 2.5.6
│   │   │           │   ├── tauri 2.10.3
│   │   │           │   └── acl-tests 0.1.0
│   │   │           ├── tauri-plugin-sample 0.1.0
│   │   │           ├── tauri-plugin-log 2.6.0
│   │   │           ├── tauri-file-associations-demo 0.1.0
│   │   │           ├── tauri 2.10.3
│   │   │           ├── restart 0.1.0
│   │   │           ├── resources 0.1.0
│   │   │           ├── bench_helloworld 0.1.0
│   │   │           ├── bench_files_transfer 0.1.0
│   │   │           ├── bench_cpu_intensive 0.1.0
│   │   │           └── api 0.1.0
│   │   └── webkit2gtk 2.0.2
│   │       ├── wry 0.54.0
│   │       ├── tauri-runtime-wry 2.10.1
│   │       ├── tauri-runtime 2.10.1
│   │       └── tauri 2.10.3
│   ├── webkit2gtk 2.0.2
│   ├── libappindicator-sys 0.9.0
│   │   └── libappindicator 0.9.0
│   │       └── tray-icon 0.21.0
│   │           └── tauri 2.10.3
│   ├── libappindicator 0.9.0
│   └── gtk 0.18.2
│       ├── wry 0.54.0
│       ├── webkit2gtk 2.0.2
│       ├── tauri-runtime-wry 2.10.1
│       ├── tauri-runtime 2.10.1
│       ├── tauri 2.10.3
│       ├── tao 0.34.5
│       │   └── tauri-runtime-wry 2.10.1
│       ├── muda 0.17.1
│       │   ├── tray-icon 0.21.0
│       │   └── tauri 2.10.3
│       └── libappindicator 0.9.0
└── atk 0.18.2
    └── gtk 0.18.2

Crate:     fxhash
Version:   0.2.1
Warning:   unmaintained
Title:     fxhash - no longer maintained
Date:      2025-09-05
ID:        RUSTSEC-2025-0057
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0057
Dependency tree:
fxhash 0.2.1
└── selectors 0.24.0
    └── kuchikiki 0.8.8-speedreader
        ├── wry 0.54.0
        │   └── tauri-runtime-wry 2.10.1
        │       └── tauri 2.10.3
        │           ├── tauri-utils 2.8.3
        │           │   ├── tauri-schema-generator 0.0.0
        │           │   ├── tauri-runtime-wry 2.10.1
        │           │   ├── tauri-runtime 2.10.1
        │           │   │   ├── tauri-runtime-wry 2.10.1
        │           │   │   └── tauri 2.10.3
        │           │   ├── tauri-plugin 2.5.4
        │           │   │   ├── tauri-plugin-sample 0.1.0
        │           │   │   │   └── api 0.1.0
        │           │   │   └── tauri-plugin-log 2.6.0
        │           │   │       └── api 0.1.0
        │           │   ├── tauri-macros 2.5.5
        │           │   │   └── tauri 2.10.3
        │           │   ├── tauri-codegen 2.5.5
        │           │   │   ├── tauri-macros 2.5.5
        │           │   │   └── tauri-build 2.5.6
        │           │   │       ├── tauri-file-associations-demo 0.1.0
        │           │   │       ├── tauri 2.10.3
        │           │   │       ├── resources 0.1.0
        │           │   │       ├── bench_helloworld 0.1.0
        │           │   │       ├── bench_files_transfer 0.1.0
        │           │   │       ├── bench_cpu_intensive 0.1.0
        │           │   │       └── api 0.1.0
        │           │   ├── tauri-cli 2.10.1
        │           │   │   └── tauri-cli-node 0.0.0
        │           │   ├── tauri-bundler 2.8.1
        │           │   │   └── tauri-cli 2.10.1
        │           │   ├── tauri-build 2.5.6
        │           │   ├── tauri 2.10.3
        │           │   └── acl-tests 0.1.0
        │           ├── tauri-plugin-sample 0.1.0
        │           ├── tauri-plugin-log 2.6.0
        │           ├── tauri-file-associations-demo 0.1.0
        │           ├── tauri 2.10.3
        │           ├── restart 0.1.0
        │           ├── resources 0.1.0
        │           ├── bench_helloworld 0.1.0
        │           ├── bench_files_transfer 0.1.0
        │           ├── bench_cpu_intensive 0.1.0
        │           └── api 0.1.0
        ├── tauri-utils 2.8.3
        └── tauri-cli 2.10.1

Crate:     gdk
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0412
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0412
Dependency tree:
gdk 0.18.2
├── webkit2gtk 2.0.2
│   ├── wry 0.54.0
│   │   └── tauri-runtime-wry 2.10.1
│   │       └── tauri 2.10.3
│   │           ├── tauri-utils 2.8.3
│   │           │   ├── tauri-schema-generator 0.0.0
│   │           │   ├── tauri-runtime-wry 2.10.1
│   │           │   ├── tauri-runtime 2.10.1
│   │           │   │   ├── tauri-runtime-wry 2.10.1
│   │           │   │   └── tauri 2.10.3
│   │           │   ├── tauri-plugin 2.5.4
│   │           │   │   ├── tauri-plugin-sample 0.1.0
│   │           │   │   │   └── api 0.1.0
│   │           │   │   └── tauri-plugin-log 2.6.0
│   │           │   │       └── api 0.1.0
│   │           │   ├── tauri-macros 2.5.5
│   │           │   │   └── tauri 2.10.3
│   │           │   ├── tauri-codegen 2.5.5
│   │           │   │   ├── tauri-macros 2.5.5
│   │           │   │   └── tauri-build 2.5.6
│   │           │   │       ├── tauri-file-associations-demo 0.1.0
│   │           │   │       ├── tauri 2.10.3
│   │           │   │       ├── resources 0.1.0
│   │           │   │       ├── bench_helloworld 0.1.0
│   │           │   │       ├── bench_files_transfer 0.1.0
│   │           │   │       ├── bench_cpu_intensive 0.1.0
│   │           │   │       └── api 0.1.0
│   │           │   ├── tauri-cli 2.10.1
│   │           │   │   └── tauri-cli-node 0.0.0
│   │           │   ├── tauri-bundler 2.8.1
│   │           │   │   └── tauri-cli 2.10.1
│   │           │   ├── tauri-build 2.5.6
│   │           │   ├── tauri 2.10.3
│   │           │   └── acl-tests 0.1.0
│   │           ├── tauri-plugin-sample 0.1.0
│   │           ├── tauri-plugin-log 2.6.0
│   │           ├── tauri-file-associations-demo 0.1.0
│   │           ├── tauri 2.10.3
│   │           ├── restart 0.1.0
│   │           ├── resources 0.1.0
│   │           ├── bench_helloworld 0.1.0
│   │           ├── bench_files_transfer 0.1.0
│   │           ├── bench_cpu_intensive 0.1.0
│   │           └── api 0.1.0
│   ├── tauri-runtime-wry 2.10.1
│   ├── tauri-runtime 2.10.1
│   └── tauri 2.10.3
├── gtk 0.18.2
│   ├── wry 0.54.0
│   ├── webkit2gtk 2.0.2
│   ├── tauri-runtime-wry 2.10.1
│   ├── tauri-runtime 2.10.1
│   ├── tauri 2.10.3
│   ├── tao 0.34.5
│   │   └── tauri-runtime-wry 2.10.1
│   ├── muda 0.17.1
│   │   ├── tray-icon 0.21.0
│   │   │   └── tauri 2.10.3
│   │   └── tauri 2.10.3
│   └── libappindicator 0.9.0
│       └── tray-icon 0.21.0
└── gdkx11 0.18.2
    └── wry 0.54.0

Crate:     gdk-sys
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0418
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0418
Dependency tree:
gdk-sys 0.18.2
├── webkit2gtk-sys 2.0.2
│   ├── wry 0.54.0
│   │   └── tauri-runtime-wry 2.10.1
│   │       └── tauri 2.10.3
│   │           ├── tauri-utils 2.8.3
│   │           │   ├── tauri-schema-generator 0.0.0
│   │           │   ├── tauri-runtime-wry 2.10.1
│   │           │   ├── tauri-runtime 2.10.1
│   │           │   │   ├── tauri-runtime-wry 2.10.1
│   │           │   │   └── tauri 2.10.3
│   │           │   ├── tauri-plugin 2.5.4
│   │           │   │   ├── tauri-plugin-sample 0.1.0
│   │           │   │   │   └── api 0.1.0
│   │           │   │   └── tauri-plugin-log 2.6.0
│   │           │   │       └── api 0.1.0
│   │           │   ├── tauri-macros 2.5.5
│   │           │   │   └── tauri 2.10.3
│   │           │   ├── tauri-codegen 2.5.5
│   │           │   │   ├── tauri-macros 2.5.5
│   │           │   │   └── tauri-build 2.5.6
│   │           │   │       ├── tauri-file-associations-demo 0.1.0
│   │           │   │       ├── tauri 2.10.3
│   │           │   │       ├── resources 0.1.0
│   │           │   │       ├── bench_helloworld 0.1.0
│   │           │   │       ├── bench_files_transfer 0.1.0
│   │           │   │       ├── bench_cpu_intensive 0.1.0
│   │           │   │       └── api 0.1.0
│   │           │   ├── tauri-cli 2.10.1
│   │           │   │   └── tauri-cli-node 0.0.0
│   │           │   ├── tauri-bundler 2.8.1
│   │           │   │   └── tauri-cli 2.10.1
│   │           │   ├── tauri-build 2.5.6
│   │           │   ├── tauri 2.10.3
│   │           │   └── acl-tests 0.1.0
│   │           ├── tauri-plugin-sample 0.1.0
│   │           ├── tauri-plugin-log 2.6.0
│   │           ├── tauri-file-associations-demo 0.1.0
│   │           ├── tauri 2.10.3
│   │           ├── restart 0.1.0
│   │           ├── resources 0.1.0
│   │           ├── bench_helloworld 0.1.0
│   │           ├── bench_files_transfer 0.1.0
│   │           ├── bench_cpu_intensive 0.1.0
│   │           └── api 0.1.0
│   └── webkit2gtk 2.0.2
│       ├── wry 0.54.0
│       ├── tauri-runtime-wry 2.10.1
│       ├── tauri-runtime 2.10.1
│       └── tauri 2.10.3
├── webkit2gtk 2.0.2
├── gtk-sys 0.18.2
│   ├── webkit2gtk-sys 2.0.2
│   ├── webkit2gtk 2.0.2
│   ├── libappindicator-sys 0.9.0
│   │   └── libappindicator 0.9.0
│   │       └── tray-icon 0.21.0
│   │           └── tauri 2.10.3
│   ├── libappindicator 0.9.0
│   └── gtk 0.18.2
│       ├── wry 0.54.0
│       ├── webkit2gtk 2.0.2
│       ├── tauri-runtime-wry 2.10.1
│       ├── tauri-runtime 2.10.1
│       ├── tauri 2.10.3
│       ├── tao 0.34.5
│       │   └── tauri-runtime-wry 2.10.1
│       ├── muda 0.17.1
│       │   ├── tray-icon 0.21.0
│       │   └── tauri 2.10.3
│       └── libappindicator 0.9.0
├── gdkx11-sys 0.18.2
│   ├── tao 0.34.5
│   └── gdkx11 0.18.2
│       └── wry 0.54.0
├── gdkwayland-sys 0.18.2
│   └── tao 0.34.5
└── gdk 0.18.2
    ├── webkit2gtk 2.0.2
    ├── gtk 0.18.2
    └── gdkx11 0.18.2

Crate:     gdkwayland-sys
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0411
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0411
Dependency tree:
gdkwayland-sys 0.18.2
└── tao 0.34.5
    └── tauri-runtime-wry 2.10.1
        └── tauri 2.10.3
            ├── tauri-utils 2.8.3
            │   ├── tauri-schema-generator 0.0.0
            │   ├── tauri-runtime-wry 2.10.1
            │   ├── tauri-runtime 2.10.1
            │   │   ├── tauri-runtime-wry 2.10.1
            │   │   └── tauri 2.10.3
            │   ├── tauri-plugin 2.5.4
            │   │   ├── tauri-plugin-sample 0.1.0
            │   │   │   └── api 0.1.0
            │   │   └── tauri-plugin-log 2.6.0
            │   │       └── api 0.1.0
            │   ├── tauri-macros 2.5.5
            │   │   └── tauri 2.10.3
            │   ├── tauri-codegen 2.5.5
            │   │   ├── tauri-macros 2.5.5
            │   │   └── tauri-build 2.5.6
            │   │       ├── tauri-file-associations-demo 0.1.0
            │   │       ├── tauri 2.10.3
            │   │       ├── resources 0.1.0
            │   │       ├── bench_helloworld 0.1.0
            │   │       ├── bench_files_transfer 0.1.0
            │   │       ├── bench_cpu_intensive 0.1.0
            │   │       └── api 0.1.0
            │   ├── tauri-cli 2.10.1
            │   │   └── tauri-cli-node 0.0.0
            │   ├── tauri-bundler 2.8.1
            │   │   └── tauri-cli 2.10.1
            │   ├── tauri-build 2.5.6
            │   ├── tauri 2.10.3
            │   └── acl-tests 0.1.0
            ├── tauri-plugin-sample 0.1.0
            ├── tauri-plugin-log 2.6.0
            ├── tauri-file-associations-demo 0.1.0
            ├── tauri 2.10.3
            ├── restart 0.1.0
            ├── resources 0.1.0
            ├── bench_helloworld 0.1.0
            ├── bench_files_transfer 0.1.0
            ├── bench_cpu_intensive 0.1.0
            └── api 0.1.0

Crate:     gdkx11
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0417
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0417
Dependency tree:
gdkx11 0.18.2
└── wry 0.54.0
    └── tauri-runtime-wry 2.10.1
        └── tauri 2.10.3
            ├── tauri-utils 2.8.3
            │   ├── tauri-schema-generator 0.0.0
            │   ├── tauri-runtime-wry 2.10.1
            │   ├── tauri-runtime 2.10.1
            │   │   ├── tauri-runtime-wry 2.10.1
            │   │   └── tauri 2.10.3
            │   ├── tauri-plugin 2.5.4
            │   │   ├── tauri-plugin-sample 0.1.0
            │   │   │   └── api 0.1.0
            │   │   └── tauri-plugin-log 2.6.0
            │   │       └── api 0.1.0
            │   ├── tauri-macros 2.5.5
            │   │   └── tauri 2.10.3
            │   ├── tauri-codegen 2.5.5
            │   │   ├── tauri-macros 2.5.5
            │   │   └── tauri-build 2.5.6
            │   │       ├── tauri-file-associations-demo 0.1.0
            │   │       ├── tauri 2.10.3
            │   │       ├── resources 0.1.0
            │   │       ├── bench_helloworld 0.1.0
            │   │       ├── bench_files_transfer 0.1.0
            │   │       ├── bench_cpu_intensive 0.1.0
            │   │       └── api 0.1.0
            │   ├── tauri-cli 2.10.1
            │   │   └── tauri-cli-node 0.0.0
            │   ├── tauri-bundler 2.8.1
            │   │   └── tauri-cli 2.10.1
            │   ├── tauri-build 2.5.6
            │   ├── tauri 2.10.3
            │   └── acl-tests 0.1.0
            ├── tauri-plugin-sample 0.1.0
            ├── tauri-plugin-log 2.6.0
            ├── tauri-file-associations-demo 0.1.0
            ├── tauri 2.10.3
            ├── restart 0.1.0
            ├── resources 0.1.0
            ├── bench_helloworld 0.1.0
            ├── bench_files_transfer 0.1.0
            ├── bench_cpu_intensive 0.1.0
            └── api 0.1.0

Crate:     gdkx11-sys
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0414
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0414
Dependency tree:
gdkx11-sys 0.18.2
├── tao 0.34.5
│   └── tauri-runtime-wry 2.10.1
│       └── tauri 2.10.3
│           ├── tauri-utils 2.8.3
│           │   ├── tauri-schema-generator 0.0.0
│           │   ├── tauri-runtime-wry 2.10.1
│           │   ├── tauri-runtime 2.10.1
│           │   │   ├── tauri-runtime-wry 2.10.1
│           │   │   └── tauri 2.10.3
│           │   ├── tauri-plugin 2.5.4
│           │   │   ├── tauri-plugin-sample 0.1.0
│           │   │   │   └── api 0.1.0
│           │   │   └── tauri-plugin-log 2.6.0
│           │   │       └── api 0.1.0
│           │   ├── tauri-macros 2.5.5
│           │   │   └── tauri 2.10.3
│           │   ├── tauri-codegen 2.5.5
│           │   │   ├── tauri-macros 2.5.5
│           │   │   └── tauri-build 2.5.6
│           │   │       ├── tauri-file-associations-demo 0.1.0
│           │   │       ├── tauri 2.10.3
│           │   │       ├── resources 0.1.0
│           │   │       ├── bench_helloworld 0.1.0
│           │   │       ├── bench_files_transfer 0.1.0
│           │   │       ├── bench_cpu_intensive 0.1.0
│           │   │       └── api 0.1.0
│           │   ├── tauri-cli 2.10.1
│           │   │   └── tauri-cli-node 0.0.0
│           │   ├── tauri-bundler 2.8.1
│           │   │   └── tauri-cli 2.10.1
│           │   ├── tauri-build 2.5.6
│           │   ├── tauri 2.10.3
│           │   └── acl-tests 0.1.0
│           ├── tauri-plugin-sample 0.1.0
│           ├── tauri-plugin-log 2.6.0
│           ├── tauri-file-associations-demo 0.1.0
│           ├── tauri 2.10.3
│           ├── restart 0.1.0
│           ├── resources 0.1.0
│           ├── bench_helloworld 0.1.0
│           ├── bench_files_transfer 0.1.0
│           ├── bench_cpu_intensive 0.1.0
│           └── api 0.1.0
└── gdkx11 0.18.2
    └── wry 0.54.0
        └── tauri-runtime-wry 2.10.1

Crate:     gtk
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0415
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0415
Dependency tree:
gtk 0.18.2
├── wry 0.54.0
│   └── tauri-runtime-wry 2.10.1
│       └── tauri 2.10.3
│           ├── tauri-utils 2.8.3
│           │   ├── tauri-schema-generator 0.0.0
│           │   ├── tauri-runtime-wry 2.10.1
│           │   ├── tauri-runtime 2.10.1
│           │   │   ├── tauri-runtime-wry 2.10.1
│           │   │   └── tauri 2.10.3
│           │   ├── tauri-plugin 2.5.4
│           │   │   ├── tauri-plugin-sample 0.1.0
│           │   │   │   └── api 0.1.0
│           │   │   └── tauri-plugin-log 2.6.0
│           │   │       └── api 0.1.0
│           │   ├── tauri-macros 2.5.5
│           │   │   └── tauri 2.10.3
│           │   ├── tauri-codegen 2.5.5
│           │   │   ├── tauri-macros 2.5.5
│           │   │   └── tauri-build 2.5.6
│           │   │       ├── tauri-file-associations-demo 0.1.0
│           │   │       ├── tauri 2.10.3
│           │   │       ├── resources 0.1.0
│           │   │       ├── bench_helloworld 0.1.0
│           │   │       ├── bench_files_transfer 0.1.0
│           │   │       ├── bench_cpu_intensive 0.1.0
│           │   │       └── api 0.1.0
│           │   ├── tauri-cli 2.10.1
│           │   │   └── tauri-cli-node 0.0.0
│           │   ├── tauri-bundler 2.8.1
│           │   │   └── tauri-cli 2.10.1
│           │   ├── tauri-build 2.5.6
│           │   ├── tauri 2.10.3
│           │   └── acl-tests 0.1.0
│           ├── tauri-plugin-sample 0.1.0
│           ├── tauri-plugin-log 2.6.0
│           ├── tauri-file-associations-demo 0.1.0
│           ├── tauri 2.10.3
│           ├── restart 0.1.0
│           ├── resources 0.1.0
│           ├── bench_helloworld 0.1.0
│           ├── bench_files_transfer 0.1.0
│           ├── bench_cpu_intensive 0.1.0
│           └── api 0.1.0
├── webkit2gtk 2.0.2
│   ├── wry 0.54.0
│   ├── tauri-runtime-wry 2.10.1
│   ├── tauri-runtime 2.10.1
│   └── tauri 2.10.3
├── tauri-runtime-wry 2.10.1
├── tauri-runtime 2.10.1
├── tauri 2.10.3
├── tao 0.34.5
│   └── tauri-runtime-wry 2.10.1
├── muda 0.17.1
│   ├── tray-icon 0.21.0
│   │   └── tauri 2.10.3
│   └── tauri 2.10.3
└── libappindicator 0.9.0
    └── tray-icon 0.21.0

Crate:     gtk-sys
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0420
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0420
Dependency tree:
gtk-sys 0.18.2
├── webkit2gtk-sys 2.0.2
│   ├── wry 0.54.0
│   │   └── tauri-runtime-wry 2.10.1
│   │       └── tauri 2.10.3
│   │           ├── tauri-utils 2.8.3
│   │           │   ├── tauri-schema-generator 0.0.0
│   │           │   ├── tauri-runtime-wry 2.10.1
│   │           │   ├── tauri-runtime 2.10.1
│   │           │   │   ├── tauri-runtime-wry 2.10.1
│   │           │   │   └── tauri 2.10.3
│   │           │   ├── tauri-plugin 2.5.4
│   │           │   │   ├── tauri-plugin-sample 0.1.0
│   │           │   │   │   └── api 0.1.0
│   │           │   │   └── tauri-plugin-log 2.6.0
│   │           │   │       └── api 0.1.0
│   │           │   ├── tauri-macros 2.5.5
│   │           │   │   └── tauri 2.10.3
│   │           │   ├── tauri-codegen 2.5.5
│   │           │   │   ├── tauri-macros 2.5.5
│   │           │   │   └── tauri-build 2.5.6
│   │           │   │       ├── tauri-file-associations-demo 0.1.0
│   │           │   │       ├── tauri 2.10.3
│   │           │   │       ├── resources 0.1.0
│   │           │   │       ├── bench_helloworld 0.1.0
│   │           │   │       ├── bench_files_transfer 0.1.0
│   │           │   │       ├── bench_cpu_intensive 0.1.0
│   │           │   │       └── api 0.1.0
│   │           │   ├── tauri-cli 2.10.1
│   │           │   │   └── tauri-cli-node 0.0.0
│   │           │   ├── tauri-bundler 2.8.1
│   │           │   │   └── tauri-cli 2.10.1
│   │           │   ├── tauri-build 2.5.6
│   │           │   ├── tauri 2.10.3
│   │           │   └── acl-tests 0.1.0
│   │           ├── tauri-plugin-sample 0.1.0
│   │           ├── tauri-plugin-log 2.6.0
│   │           ├── tauri-file-associations-demo 0.1.0
│   │           ├── tauri 2.10.3
│   │           ├── restart 0.1.0
│   │           ├── resources 0.1.0
│   │           ├── bench_helloworld 0.1.0
│   │           ├── bench_files_transfer 0.1.0
│   │           ├── bench_cpu_intensive 0.1.0
│   │           └── api 0.1.0
│   └── webkit2gtk 2.0.2
│       ├── wry 0.54.0
│       ├── tauri-runtime-wry 2.10.1
│       ├── tauri-runtime 2.10.1
│       └── tauri 2.10.3
├── webkit2gtk 2.0.2
├── libappindicator-sys 0.9.0
│   └── libappindicator 0.9.0
│       └── tray-icon 0.21.0
│           └── tauri 2.10.3
├── libappindicator 0.9.0
└── gtk 0.18.2
    ├── wry 0.54.0
    ├── webkit2gtk 2.0.2
    ├── tauri-runtime-wry 2.10.1
    ├── tauri-runtime 2.10.1
    ├── tauri 2.10.3
    ├── tao 0.34.5
    │   └── tauri-runtime-wry 2.10.1
    ├── muda 0.17.1
    │   ├── tray-icon 0.21.0
    │   └── tauri 2.10.3
    └── libappindicator 0.9.0

Crate:     gtk3-macros
Version:   0.18.2
Warning:   unmaintained
Title:     gtk-rs GTK3 bindings - no longer maintained
Date:      2024-03-04
ID:        RUSTSEC-2024-0419
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0419
Dependency tree:
gtk3-macros 0.18.2
└── gtk 0.18.2
    ├── wry 0.54.0
    │   └── tauri-runtime-wry 2.10.1
    │       └── tauri 2.10.3
    │           ├── tauri-utils 2.8.3
    │           │   ├── tauri-schema-generator 0.0.0
    │           │   ├── tauri-runtime-wry 2.10.1
    │           │   ├── tauri-runtime 2.10.1
    │           │   │   ├── tauri-runtime-wry 2.10.1
    │           │   │   └── tauri 2.10.3
    │           │   ├── tauri-plugin 2.5.4
    │           │   │   ├── tauri-plugin-sample 0.1.0
    │           │   │   │   └── api 0.1.0
    │           │   │   └── tauri-plugin-log 2.6.0
    │           │   │       └── api 0.1.0
    │           │   ├── tauri-macros 2.5.5
    │           │   │   └── tauri 2.10.3
    │           │   ├── tauri-codegen 2.5.5
    │           │   │   ├── tauri-macros 2.5.5
    │           │   │   └── tauri-build 2.5.6
    │           │   │       ├── tauri-file-associations-demo 0.1.0
    │           │   │       ├── tauri 2.10.3
    │           │   │       ├── resources 0.1.0
    │           │   │       ├── bench_helloworld 0.1.0
    │           │   │       ├── bench_files_transfer 0.1.0
    │           │   │       ├── bench_cpu_intensive 0.1.0
    │           │   │       └── api 0.1.0
    │           │   ├── tauri-cli 2.10.1
    │           │   │   └── tauri-cli-node 0.0.0
    │           │   ├── tauri-bundler 2.8.1
    │           │   │   └── tauri-cli 2.10.1
    │           │   ├── tauri-build 2.5.6
    │           │   ├── tauri 2.10.3
    │           │   └── acl-tests 0.1.0
    │           ├── tauri-plugin-sample 0.1.0
    │           ├── tauri-plugin-log 2.6.0
    │           ├── tauri-file-associations-demo 0.1.0
    │           ├── tauri 2.10.3
    │           ├── restart 0.1.0
    │           ├── resources 0.1.0
    │           ├── bench_helloworld 0.1.0
    │           ├── bench_files_transfer 0.1.0
    │           ├── bench_cpu_intensive 0.1.0
    │           └── api 0.1.0
    ├── webkit2gtk 2.0.2
    │   ├── wry 0.54.0
    │   ├── tauri-runtime-wry 2.10.1
    │   ├── tauri-runtime 2.10.1
    │   └── tauri 2.10.3
    ├── tauri-runtime-wry 2.10.1
    ├── tauri-runtime 2.10.1
    ├── tauri 2.10.3
    ├── tao 0.34.5
    │   └── tauri-runtime-wry 2.10.1
    ├── muda 0.17.1
    │   ├── tray-icon 0.21.0
    │   │   └── tauri 2.10.3
    │   └── tauri 2.10.3
    └── libappindicator 0.9.0
        └── tray-icon 0.21.0

Crate:     paste
Version:   1.0.15
Warning:   unmaintained
Title:     paste - no longer maintained
Date:      2024-10-07
ID:        RUSTSEC-2024-0436
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0436
Dependency tree:
paste 1.0.15
├── specta 2.0.0-rc.20
│   └── tauri 2.10.3
│       ├── tauri-utils 2.8.3
│       │   ├── tauri-schema-generator 0.0.0
│       │   ├── tauri-runtime-wry 2.10.1
│       │   │   └── tauri 2.10.3
│       │   ├── tauri-runtime 2.10.1
│       │   │   ├── tauri-runtime-wry 2.10.1
│       │   │   └── tauri 2.10.3
│       │   ├── tauri-plugin 2.5.4
│       │   │   ├── tauri-plugin-sample 0.1.0
│       │   │   │   └── api 0.1.0
│       │   │   └── tauri-plugin-log 2.6.0
│       │   │       └── api 0.1.0
│       │   ├── tauri-macros 2.5.5
│       │   │   └── tauri 2.10.3
│       │   ├── tauri-codegen 2.5.5
│       │   │   ├── tauri-macros 2.5.5
│       │   │   └── tauri-build 2.5.6
│       │   │       ├── tauri-file-associations-demo 0.1.0
│       │   │       ├── tauri 2.10.3
│       │   │       ├── resources 0.1.0
│       │   │       ├── bench_helloworld 0.1.0
│       │   │       ├── bench_files_transfer 0.1.0
│       │   │       ├── bench_cpu_intensive 0.1.0
│       │   │       └── api 0.1.0
│       │   ├── tauri-cli 2.10.1
│       │   │   └── tauri-cli-node 0.0.0
│       │   ├── tauri-bundler 2.8.1
│       │   │   └── tauri-cli 2.10.1
│       │   ├── tauri-build 2.5.6
│       │   ├── tauri 2.10.3
│       │   └── acl-tests 0.1.0
│       ├── tauri-plugin-sample 0.1.0
│       ├── tauri-plugin-log 2.6.0
│       ├── tauri-file-associations-demo 0.1.0
│       ├── tauri 2.10.3
│       ├── restart 0.1.0
│       ├── resources 0.1.0
│       ├── bench_helloworld 0.1.0
│       ├── bench_files_transfer 0.1.0
│       ├── bench_cpu_intensive 0.1.0
│       └── api 0.1.0
└── rav1e 0.7.1
    └── ravif 0.11.11
        └── image 0.25.5
            ├── tauri-cli 2.10.1
            ├── tauri-bundler 2.8.1
            └── tauri 2.10.3

Crate:     rustls-pemfile
Version:   1.0.4
Warning:   unmaintained
Title:     rustls-pemfile is unmaintained
Date:      2025-11-28
ID:        RUSTSEC-2025-0134
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0134
Dependency tree:
rustls-pemfile 1.0.4
├── rustls-native-certs 0.6.3
│   └── reqwest 0.11.27
│       ├── cryptographic-message-syntax 0.26.0
│       │   ├── apple-xar 0.18.0
│       │   │   ├── apple-flat-package 0.18.0
│       │   │   │   └── apple-codesign 0.27.0
│       │   │   │       └── tauri-macos-sign 2.3.3
│       │   │   │           ├── tauri-cli 2.10.1
│       │   │   │           │   └── tauri-cli-node 0.0.0
│       │   │   │           └── tauri-bundler 2.8.1
│       │   │   │               └── tauri-cli 2.10.1
│       │   │   └── apple-codesign 0.27.0
│       │   └── apple-codesign 0.27.0
│       ├── apple-xar 0.18.0
│       └── apple-codesign 0.27.0
└── reqwest 0.11.27

Crate:     rustls-pemfile
Version:   2.2.0
Warning:   unmaintained
Title:     rustls-pemfile is unmaintained
Date:      2025-11-28
ID:        RUSTSEC-2025-0134
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0134
Dependency tree:
rustls-pemfile 2.2.0
└── rustls-native-certs 0.7.3
    └── tungstenite 0.21.0
        └── apple-codesign 0.27.0
            └── tauri-macos-sign 2.3.3
                ├── tauri-cli 2.10.1
                │   └── tauri-cli-node 0.0.0
                └── tauri-bundler 2.8.1
                    └── tauri-cli 2.10.1

Crate:     unic-char-property
Version:   0.9.0
Warning:   unmaintained
Title:     `unic-char-property` is unmaintained
Date:      2025-10-18
ID:        RUSTSEC-2025-0081
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0081
Dependency tree:
unic-char-property 0.9.0
└── unic-ucd-ident 0.9.0
    └── urlpattern 0.3.0
        └── tauri-utils 2.8.3
            ├── tauri-schema-generator 0.0.0
            ├── tauri-runtime-wry 2.10.1
            │   └── tauri 2.10.3
            │       ├── tauri-utils 2.8.3
            │       ├── tauri-plugin-sample 0.1.0
            │       │   └── api 0.1.0
            │       ├── tauri-plugin-log 2.6.0
            │       │   └── api 0.1.0
            │       ├── tauri-file-associations-demo 0.1.0
            │       ├── tauri 2.10.3
            │       ├── restart 0.1.0
            │       ├── resources 0.1.0
            │       ├── bench_helloworld 0.1.0
            │       ├── bench_files_transfer 0.1.0
            │       ├── bench_cpu_intensive 0.1.0
            │       └── api 0.1.0
            ├── tauri-runtime 2.10.1
            │   ├── tauri-runtime-wry 2.10.1
            │   └── tauri 2.10.3
            ├── tauri-plugin 2.5.4
            │   ├── tauri-plugin-sample 0.1.0
            │   └── tauri-plugin-log 2.6.0
            ├── tauri-macros 2.5.5
            │   └── tauri 2.10.3
            ├── tauri-codegen 2.5.5
            │   ├── tauri-macros 2.5.5
            │   └── tauri-build 2.5.6
            │       ├── tauri-file-associations-demo 0.1.0
            │       ├── tauri 2.10.3
            │       ├── resources 0.1.0
            │       ├── bench_helloworld 0.1.0
            │       ├── bench_files_transfer 0.1.0
            │       ├── bench_cpu_intensive 0.1.0
            │       └── api 0.1.0
            ├── tauri-cli 2.10.1
            │   └── tauri-cli-node 0.0.0
            ├── tauri-bundler 2.8.1
            │   └── tauri-cli 2.10.1
            ├── tauri-build 2.5.6
            ├── tauri 2.10.3
            └── acl-tests 0.1.0

Crate:     unic-char-range
Version:   0.9.0
Warning:   unmaintained
Title:     `unic-char-range` is unmaintained
Date:      2025-10-18
ID:        RUSTSEC-2025-0075
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0075
Dependency tree:
unic-char-range 0.9.0
├── unic-ucd-ident 0.9.0
│   └── urlpattern 0.3.0
│       └── tauri-utils 2.8.3
│           ├── tauri-schema-generator 0.0.0
│           ├── tauri-runtime-wry 2.10.1
│           │   └── tauri 2.10.3
│           │       ├── tauri-utils 2.8.3
│           │       ├── tauri-plugin-sample 0.1.0
│           │       │   └── api 0.1.0
│           │       ├── tauri-plugin-log 2.6.0
│           │       │   └── api 0.1.0
│           │       ├── tauri-file-associations-demo 0.1.0
│           │       ├── tauri 2.10.3
│           │       ├── restart 0.1.0
│           │       ├── resources 0.1.0
│           │       ├── bench_helloworld 0.1.0
│           │       ├── bench_files_transfer 0.1.0
│           │       ├── bench_cpu_intensive 0.1.0
│           │       └── api 0.1.0
│           ├── tauri-runtime 2.10.1
│           │   ├── tauri-runtime-wry 2.10.1
│           │   └── tauri 2.10.3
│           ├── tauri-plugin 2.5.4
│           │   ├── tauri-plugin-sample 0.1.0
│           │   └── tauri-plugin-log 2.6.0
│           ├── tauri-macros 2.5.5
│           │   └── tauri 2.10.3
│           ├── tauri-codegen 2.5.5
│           │   ├── tauri-macros 2.5.5
│           │   └── tauri-build 2.5.6
│           │       ├── tauri-file-associations-demo 0.1.0
│           │       ├── tauri 2.10.3
│           │       ├── resources 0.1.0
│           │       ├── bench_helloworld 0.1.0
│           │       ├── bench_files_transfer 0.1.0
│           │       ├── bench_cpu_intensive 0.1.0
│           │       └── api 0.1.0
│           ├── tauri-cli 2.10.1
│           │   └── tauri-cli-node 0.0.0
│           ├── tauri-bundler 2.8.1
│           │   └── tauri-cli 2.10.1
│           ├── tauri-build 2.5.6
│           ├── tauri 2.10.3
│           └── acl-tests 0.1.0
└── unic-char-property 0.9.0
    └── unic-ucd-ident 0.9.0

Crate:     unic-common
Version:   0.9.0
Warning:   unmaintained
Title:     `unic-common` is unmaintained
Date:      2025-10-18
ID:        RUSTSEC-2025-0080
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0080
Dependency tree:
unic-common 0.9.0
└── unic-ucd-version 0.9.0
    └── unic-ucd-ident 0.9.0
        └── urlpattern 0.3.0
            └── tauri-utils 2.8.3
                ├── tauri-schema-generator 0.0.0
                ├── tauri-runtime-wry 2.10.1
                │   └── tauri 2.10.3
                │       ├── tauri-utils 2.8.3
                │       ├── tauri-plugin-sample 0.1.0
                │       │   └── api 0.1.0
                │       ├── tauri-plugin-log 2.6.0
                │       │   └── api 0.1.0
                │       ├── tauri-file-associations-demo 0.1.0
                │       ├── tauri 2.10.3
                │       ├── restart 0.1.0
                │       ├── resources 0.1.0
                │       ├── bench_helloworld 0.1.0
                │       ├── bench_files_transfer 0.1.0
                │       ├── bench_cpu_intensive 0.1.0
                │       └── api 0.1.0
                ├── tauri-runtime 2.10.1
                │   ├── tauri-runtime-wry 2.10.1
                │   └── tauri 2.10.3
                ├── tauri-plugin 2.5.4
                │   ├── tauri-plugin-sample 0.1.0
                │   └── tauri-plugin-log 2.6.0
                ├── tauri-macros 2.5.5
                │   └── tauri 2.10.3
                ├── tauri-codegen 2.5.5
                │   ├── tauri-macros 2.5.5
                │   └── tauri-build 2.5.6
                │       ├── tauri-file-associations-demo 0.1.0
                │       ├── tauri 2.10.3
                │       ├── resources 0.1.0
                │       ├── bench_helloworld 0.1.0
                │       ├── bench_files_transfer 0.1.0
                │       ├── bench_cpu_intensive 0.1.0
                │       └── api 0.1.0
                ├── tauri-cli 2.10.1
                │   └── tauri-cli-node 0.0.0
                ├── tauri-bundler 2.8.1
                │   └── tauri-cli 2.10.1
                ├── tauri-build 2.5.6
                ├── tauri 2.10.3
                └── acl-tests 0.1.0

Crate:     unic-ucd-ident
Version:   0.9.0
Warning:   unmaintained
Title:     `unic-ucd-ident` is unmaintained
Date:      2025-10-18
ID:        RUSTSEC-2025-0100
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0100
Dependency tree:
unic-ucd-ident 0.9.0
└── urlpattern 0.3.0
    └── tauri-utils 2.8.3
        ├── tauri-schema-generator 0.0.0
        ├── tauri-runtime-wry 2.10.1
        │   └── tauri 2.10.3
        │       ├── tauri-utils 2.8.3
        │       ├── tauri-plugin-sample 0.1.0
        │       │   └── api 0.1.0
        │       ├── tauri-plugin-log 2.6.0
        │       │   └── api 0.1.0
        │       ├── tauri-file-associations-demo 0.1.0
        │       ├── tauri 2.10.3
        │       ├── restart 0.1.0
        │       ├── resources 0.1.0
        │       ├── bench_helloworld 0.1.0
        │       ├── bench_files_transfer 0.1.0
        │       ├── bench_cpu_intensive 0.1.0
        │       └── api 0.1.0
        ├── tauri-runtime 2.10.1
        │   ├── tauri-runtime-wry 2.10.1
        │   └── tauri 2.10.3
        ├── tauri-plugin 2.5.4
        │   ├── tauri-plugin-sample 0.1.0
        │   └── tauri-plugin-log 2.6.0
        ├── tauri-macros 2.5.5
        │   └── tauri 2.10.3
        ├── tauri-codegen 2.5.5
        │   ├── tauri-macros 2.5.5
        │   └── tauri-build 2.5.6
        │       ├── tauri-file-associations-demo 0.1.0
        │       ├── tauri 2.10.3
        │       ├── resources 0.1.0
        │       ├── bench_helloworld 0.1.0
        │       ├── bench_files_transfer 0.1.0
        │       ├── bench_cpu_intensive 0.1.0
        │       └── api 0.1.0
        ├── tauri-cli 2.10.1
        │   └── tauri-cli-node 0.0.0
        ├── tauri-bundler 2.8.1
        │   └── tauri-cli 2.10.1
        ├── tauri-build 2.5.6
        ├── tauri 2.10.3
        └── acl-tests 0.1.0

Crate:     unic-ucd-version
Version:   0.9.0
Warning:   unmaintained
Title:     `unic-ucd-version` is unmaintained
Date:      2025-10-18
ID:        RUSTSEC-2025-0098
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0098
Dependency tree:
unic-ucd-version 0.9.0
└── unic-ucd-ident 0.9.0
    └── urlpattern 0.3.0
        └── tauri-utils 2.8.3
            ├── tauri-schema-generator 0.0.0
            ├── tauri-runtime-wry 2.10.1
            │   └── tauri 2.10.3
            │       ├── tauri-utils 2.8.3
            │       ├── tauri-plugin-sample 0.1.0
            │       │   └── api 0.1.0
            │       ├── tauri-plugin-log 2.6.0
            │       │   └── api 0.1.0
            │       ├── tauri-file-associations-demo 0.1.0
            │       ├── tauri 2.10.3
            │       ├── restart 0.1.0
            │       ├── resources 0.1.0
            │       ├── bench_helloworld 0.1.0
            │       ├── bench_files_transfer 0.1.0
            │       ├── bench_cpu_intensive 0.1.0
            │       └── api 0.1.0
            ├── tauri-runtime 2.10.1
            │   ├── tauri-runtime-wry 2.10.1
            │   └── tauri 2.10.3
            ├── tauri-plugin 2.5.4
            │   ├── tauri-plugin-sample 0.1.0
            │   └── tauri-plugin-log 2.6.0
            ├── tauri-macros 2.5.5
            │   └── tauri 2.10.3
            ├── tauri-codegen 2.5.5
            │   ├── tauri-macros 2.5.5
            │   └── tauri-build 2.5.6
            │       ├── tauri-file-associations-demo 0.1.0
            │       ├── tauri 2.10.3
            │       ├── resources 0.1.0
            │       ├── bench_helloworld 0.1.0
            │       ├── bench_files_transfer 0.1.0
            │       ├── bench_cpu_intensive 0.1.0
            │       └── api 0.1.0
            ├── tauri-cli 2.10.1
            │   └── tauri-cli-node 0.0.0
            ├── tauri-bundler 2.8.1
            │   └── tauri-cli 2.10.1
            ├── tauri-build 2.5.6
            ├── tauri 2.10.3
            └── acl-tests 0.1.0

Crate:     glib
Version:   0.18.5
Warning:   unsound
Title:     Unsoundness in `Iterator` and `DoubleEndedIterator` impls for `glib::VariantStrIter`
Date:      2024-03-30
ID:        RUSTSEC-2024-0429
URL:       https://rustsec.org/advisories/RUSTSEC-2024-0429
Dependency tree:
glib 0.18.5
├── webkit2gtk 2.0.2
│   ├── wry 0.54.0
│   │   └── tauri-runtime-wry 2.10.1
│   │       └── tauri 2.10.3
│   │           ├── tauri-utils 2.8.3
│   │           │   ├── tauri-schema-generator 0.0.0
│   │           │   ├── tauri-runtime-wry 2.10.1
│   │           │   ├── tauri-runtime 2.10.1
│   │           │   │   ├── tauri-runtime-wry 2.10.1
│   │           │   │   └── tauri 2.10.3
│   │           │   ├── tauri-plugin 2.5.4
│   │           │   │   ├── tauri-plugin-sample 0.1.0
│   │           │   │   │   └── api 0.1.0
│   │           │   │   └── tauri-plugin-log 2.6.0
│   │           │   │       └── api 0.1.0
│   │           │   ├── tauri-macros 2.5.5
│   │           │   │   └── tauri 2.10.3
│   │           │   ├── tauri-codegen 2.5.5
│   │           │   │   ├── tauri-macros 2.5.5
│   │           │   │   └── tauri-build 2.5.6
│   │           │   │       ├── tauri-file-associations-demo 0.1.0
│   │           │   │       ├── tauri 2.10.3
│   │           │   │       ├── resources 0.1.0
│   │           │   │       ├── bench_helloworld 0.1.0
│   │           │   │       ├── bench_files_transfer 0.1.0
│   │           │   │       ├── bench_cpu_intensive 0.1.0
│   │           │   │       └── api 0.1.0
│   │           │   ├── tauri-cli 2.10.1
│   │           │   │   └── tauri-cli-node 0.0.0
│   │           │   ├── tauri-bundler 2.8.1
│   │           │   │   └── tauri-cli 2.10.1
│   │           │   ├── tauri-build 2.5.6
│   │           │   ├── tauri 2.10.3
│   │           │   └── acl-tests 0.1.0
│   │           ├── tauri-plugin-sample 0.1.0
│   │           ├── tauri-plugin-log 2.6.0
│   │           ├── tauri-file-associations-demo 0.1.0
│   │           ├── tauri 2.10.3
│   │           ├── restart 0.1.0
│   │           ├── resources 0.1.0
│   │           ├── bench_helloworld 0.1.0
│   │           ├── bench_files_transfer 0.1.0
│   │           ├── bench_cpu_intensive 0.1.0
│   │           └── api 0.1.0
│   ├── tauri-runtime-wry 2.10.1
│   ├── tauri-runtime 2.10.1
│   └── tauri 2.10.3
├── soup3 0.5.0
│   ├── wry 0.54.0
│   └── webkit2gtk 2.0.2
├── pango 0.18.3
│   ├── gtk 0.18.2
│   │   ├── wry 0.54.0
│   │   ├── webkit2gtk 2.0.2
│   │   ├── tauri-runtime-wry 2.10.1
│   │   ├── tauri-runtime 2.10.1
│   │   ├── tauri 2.10.3
│   │   ├── tao 0.34.5
│   │   │   └── tauri-runtime-wry 2.10.1
│   │   ├── muda 0.17.1
│   │   │   ├── tray-icon 0.21.0
│   │   │   │   └── tauri 2.10.3
│   │   │   └── tauri 2.10.3
│   │   └── libappindicator 0.9.0
│   │       └── tray-icon 0.21.0
│   └── gdk 0.18.2
│       ├── webkit2gtk 2.0.2
│       ├── gtk 0.18.2
│       └── gdkx11 0.18.2
│           └── wry 0.54.0
├── libappindicator 0.9.0
├── javascriptcore-rs 1.1.2
│   ├── wry 0.54.0
│   └── webkit2gtk 2.0.2
├── gtk 0.18.2
├── gio 0.18.4
│   ├── webkit2gtk 2.0.2
│   ├── soup3 0.5.0
│   ├── pango 0.18.3
│   ├── gtk 0.18.2
│   ├── gdkx11 0.18.2
│   ├── gdk-pixbuf 0.18.5
│   │   ├── gtk 0.18.2
│   │   └── gdk 0.18.2
│   └── gdk 0.18.2
├── gdkx11 0.18.2
├── gdk-pixbuf 0.18.5
├── gdk 0.18.2
├── cairo-rs 0.18.5
│   ├── webkit2gtk 2.0.2
│   ├── gtk 0.18.2
│   └── gdk 0.18.2
└── atk 0.18.2
    └── gtk 0.18.2

Crate:     scc
Version:   2.3.0
Warning:   yanked
Dependency tree:
scc 2.3.0
└── serial_test 3.2.0
    └── tauri-utils 2.8.3
        ├── tauri-schema-generator 0.0.0
        ├── tauri-runtime-wry 2.10.1
        │   └── tauri 2.10.3
        │       ├── tauri-utils 2.8.3
        │       ├── tauri-plugin-sample 0.1.0
        │       │   └── api 0.1.0
        │       ├── tauri-plugin-log 2.6.0
        │       │   └── api 0.1.0
        │       ├── tauri-file-associations-demo 0.1.0
        │       ├── tauri 2.10.3
        │       ├── restart 0.1.0
        │       ├── resources 0.1.0
        │       ├── bench_helloworld 0.1.0
        │       ├── bench_files_transfer 0.1.0
        │       ├── bench_cpu_intensive 0.1.0
        │       └── api 0.1.0
        ├── tauri-runtime 2.10.1
        │   ├── tauri-runtime-wry 2.10.1
        │   └── tauri 2.10.3
        ├── tauri-plugin 2.5.4
        │   ├── tauri-plugin-sample 0.1.0
        │   └── tauri-plugin-log 2.6.0
        ├── tauri-macros 2.5.5
        │   └── tauri 2.10.3
        ├── tauri-codegen 2.5.5
        │   ├── tauri-macros 2.5.5
        │   └── tauri-build 2.5.6
        │       ├── tauri-file-associations-demo 0.1.0
        │       ├── tauri 2.10.3
        │       ├── resources 0.1.0
        │       ├── bench_helloworld 0.1.0
        │       ├── bench_files_transfer 0.1.0
        │       ├── bench_cpu_intensive 0.1.0
        │       └── api 0.1.0
        ├── tauri-cli 2.10.1
        │   └── tauri-cli-node 0.0.0
        ├── tauri-bundler 2.8.1
        │   └── tauri-cli 2.10.1
        ├── tauri-build 2.5.6
        ├── tauri 2.10.3
        └── acl-tests 0.1.0

Crate:     sdd
Version:   3.0.5
Warning:   yanked
Dependency tree:
sdd 3.0.5
└── scc 2.3.0
    └── serial_test 3.2.0
        └── tauri-utils 2.8.3
            ├── tauri-schema-generator 0.0.0
            ├── tauri-runtime-wry 2.10.1
            │   └── tauri 2.10.3
            │       ├── tauri-utils 2.8.3
            │       ├── tauri-plugin-sample 0.1.0
            │       │   └── api 0.1.0
            │       ├── tauri-plugin-log 2.6.0
            │       │   └── api 0.1.0
            │       ├── tauri-file-associations-demo 0.1.0
            │       ├── tauri 2.10.3
            │       ├── restart 0.1.0
            │       ├── resources 0.1.0
            │       ├── bench_helloworld 0.1.0
            │       ├── bench_files_transfer 0.1.0
            │       ├── bench_cpu_intensive 0.1.0
            │       └── api 0.1.0
            ├── tauri-runtime 2.10.1
            │   ├── tauri-runtime-wry 2.10.1
            │   └── tauri 2.10.3
            ├── tauri-plugin 2.5.4
            │   ├── tauri-plugin-sample 0.1.0
            │   └── tauri-plugin-log 2.6.0
            ├── tauri-macros 2.5.5
            │   └── tauri 2.10.3
            ├── tauri-codegen 2.5.5
            │   ├── tauri-macros 2.5.5
            │   └── tauri-build 2.5.6
            │       ├── tauri-file-associations-demo 0.1.0
            │       ├── tauri 2.10.3
            │       ├── resources 0.1.0
            │       ├── bench_helloworld 0.1.0
            │       ├── bench_files_transfer 0.1.0
            │       ├── bench_cpu_intensive 0.1.0
            │       └── api 0.1.0
            ├── tauri-cli 2.10.1
            │   └── tauri-cli-node 0.0.0
            ├── tauri-bundler 2.8.1
            │   └── tauri-cli 2.10.1
            ├── tauri-build 2.5.6
            ├── tauri 2.10.3
            └── acl-tests 0.1.0

warning: 22 allowed warnings found

[2.10.3]

Dependencies

Upgraded to tauri-utils@2.8.3
Upgraded to tauri-runtime@2.10.1
Upgraded to tauri-runtime-wry@2.10.1
Upgraded to tauri-macros@2.5.5
Upgraded to tauri-build@2.5.6

Cargo Publish

Updating crates.io index
   Packaging tauri v2.10.3 (/home/r

> ✂ **Note**
> 
> PR body was truncated to here.


</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - ""
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/Gabo-Tech/ChatGPT-Multiplatform-Desktop-Wrapper).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjE1OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Update Rust crate tauri to v2.11.1 [SECURITY]

2a20fe9

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update Rust crate tauri to v2.11.1 [SECURITY]#11

Update Rust crate tauri to v2.11.1 [SECURITY]#11
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/crate-tauri-vulnerability

renovate Bot commented May 8, 2026 •

edited

Loading

Cargo Audit

Cargo Publish

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented May 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Tauri has an Origin Confusion Issue that Allows Remote Pages to Invoke Local-Only IPC Commands

Details

Summary

Details

PoC

Impact

Severity

References

Release Notes

v2.11.1: @​tauri-apps/cli v2.11.1

[2.11.1]

Dependencies

v2.11.0: @​tauri-apps/cli v2.11.0

[2.11.0]

New Features

Enhancements

Bug Fixes

What's Changed

Dependencies

v2.10.3: tauri v2.10.3

Cargo Audit

[2.10.3]

Dependencies

Cargo Publish

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented May 8, 2026 •

edited

Loading

`v2.11.1`: @tauri-apps/cli v2.11.1

`v2.11.0`: @tauri-apps/cli v2.11.0

`v2.10.3`: tauri v2.10.3