← Scan another repo

github.com/tauri-apps/tauri

@ 259cffbf53b5

Submitted 8/4/2026, 10:25:53 AM · Status: ok

Risk grade
F
100 / 100
Findings
842
0 critical6 high42 medium6 low788 info0 on CISA KEV0ATT&CK
Showing 842 of 842 findings

Findings

  • Detected generic-api-key: Detected a Generic API Key, potentially exposing access to various services and sensitive operations
    Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    gitleaks
  • rust-openssl has undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs
    grypeCVE-2026-42327EPSS 0.2%
  • 'RUN <package-manager> update' instruction alone
    The instruction 'RUN <package-manager> update' should always be followed by '<package-manager> install' in the same RUN statement.
    trivy.docker/cross/aarch64.Dockerfile:43
  • Image user should not be 'root'
    Running containers with 'root' user can lead to a container escape situation. It is a best practice to run containers as non-root users, which can be done by adding a 'USER' statement to the Dockerfile.
    trivy.devcontainer/Dockerfile:0
  • Image user should not be 'root'
    Running containers with 'root' user can lead to a container escape situation. It is a best practice to run containers as non-root users, which can be done by adding a 'USER' statement to the Dockerfile.
    trivy.docker/cross/aarch64.Dockerfile:0
  • rust-openssl: rust-openssl: Arbitrary code execution via specially crafted certificate
    rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.7 to before 0.10.79, X509Ref::ocsp_responders returns OCSP responder URLs from a certificate's AIA extension as OpensslString, whose Deref<Target = str> wraps the raw bytes with str::from_utf8_unch…
    trivyCVE-2026-42327

This report is public.