https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 13:37:40 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-95627 <p>When a Tauri application uses the dialog plugin&#39;s file or folder picker, an attacker with JavaScript execution (XSS) can force the scope expansion to be recursive, granting read/write access to an entire directory tree after a single user click on a normal-looking OS file dialog. The user has no indication that recursive access was granted, and the expanded scope cannot be revoked for the lifetime of the application.</p> <p>When a Tauri application uses the dialog plugin&#39;s file or folder picker, an attacker with JavaScript execution (XSS) can force the scope expansion to be recursive, granting read/write access to an entire directory tree after a single user click on a normal-looking OS file dialog. The user has no indication that recursive access was granted, and the expanded scope cannot be revoked for the lifetime of the application.</p> https://db.gcve.eu/vuln/fkie_cve-2026-95627 https://db.gcve.eu/vuln/ghsa-j8fp-v6pf-qx45 <p>When a Tauri application uses the dialog plugin&#39;s file or folder picker, an attacker with JavaScript execution (XSS) can force the scope expansion to be recursive, granting read/write access to an entire directory tree after a single user click on a normal-looking OS file dialog. The user has no indication that recursive access was granted, and the expanded scope cannot be revoked for the lifetime of the application.</p> <p>When a Tauri application uses the dialog plugin&#39;s file or folder picker, an attacker with JavaScript execution (XSS) can force the scope expansion to be recursive, granting read/write access to an entire directory tree after a single user click on a normal-looking OS file dialog. The user has no indication that recursive access was granted, and the expanded scope cannot be revoked for the lifetime of the application.</p> https://db.gcve.eu/vuln/ghsa-j8fp-v6pf-qx45