tauri
Warn
Audited by Socket on Sep 18, 2026
1 alert found:
SecuritySecurityreferences/rust-backend.md
MEDIUMSecurityMEDIUM
references/rust-backend.md
No evidence of intentional malware or supply-chain sabotage is present; this is readable instructional Tauri/Rust sample code. However, the unrestricted filesystem commands permit arbitrary file reads, writes, and directory enumeration within application privileges, and the caller-controlled HTTP request example can enable arbitrary outbound requests. These capabilities should be constrained with Tauri permissions, trusted command callers, application-directory allowlists, path canonicalization, URL allowlists, and production-specific configuration before use.
Confidence: 97%Severity: 72%
Audit Metadata