No vulnerabilities found in Rust dependency tree.
No vulnerabilities found in production npm dependencies.
No open findings. All known advisories in scope are documented in the audit.toml suppression list with written rationales.
| Ecosystem | Package | ID | CVSS | Fixed in | Summary |
|---|---|---|---|---|---|
| crates.io | atomic-polyfill 1.0.3 src-tauri/Cargo.lock, src-tauri/peer-l0/Cargo.lock |
RUSTSEC-2023-0089 | unknown | atomic-polyfill is unmaintained | |
| crates.io | crypto-bigint 0.5.5 src-tauri/Cargo.lock |
RUSTSEC-2026-0387 | unknown | 0.7.6 | Multiple timing variability issues in operations intended to be constant-time |
| crates.io | glib 0.18.5 src-tauri/Cargo.lock |
RUSTSEC-2024-0429 | unknown | 0.20.0 | Unsoundness in `Iterator` and `DoubleEndedIterator` impls for `glib::VariantStrIter` |
| crates.io | glib 0.18.5 src-tauri/Cargo.lock |
GHSA-wrw7-89jp-8q8g | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N | 0.20.0 | Unsoundness in `Iterator` and `DoubleEndedIterator` impls for `glib::VariantStrIter` |
| crates.io | instant 0.1.13 src-tauri/Cargo.lock |
RUSTSEC-2024-0384 | unknown | `instant` is unmaintained | |
| crates.io | lru 0.7.8 src-tauri/Cargo.lock |
RUSTSEC-2026-0253 | unknown | 0.18.2 | Potential use-after-free due to lack of panic safety in `LruCache::pop()` |
| crates.io | paste 1.0.15 src-tauri/Cargo.lock, src-tauri/peer-l0/Cargo.lock |
RUSTSEC-2024-0436 | unknown | paste - no longer maintained | |
| crates.io | proc-macro-error 0.4.12 src-tauri/Cargo.lock, src-tauri/peer-l0/Cargo.lock |
RUSTSEC-2024-0370 | unknown | proc-macro-error is unmaintained | |
| crates.io | proc-macro-error 1.0.4 src-tauri/Cargo.lock |
RUSTSEC-2024-0370 | unknown | proc-macro-error is unmaintained | |
| crates.io | rsa 0.10.0-rc.18 src-tauri/Cargo.lock |
RUSTSEC-2023-0071 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N | Marvin Attack: potential key recovery through timing sidechannels | |
| crates.io | rsa 0.9.10 src-tauri/Cargo.lock |
RUSTSEC-2023-0071 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N | Marvin Attack: potential key recovery through timing sidechannels | |
| crates.io | tauri 2.11.0 src-tauri/Cargo.lock |
GHSA-7gmj-67g7-phm9 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 2.11.1 | Tauri has an Origin Confusion Issue that Allows Remote Pages to Invoke Local-Only IPC Commands |
| crates.io | unic-char-property 0.9.0 src-tauri/Cargo.lock |
RUSTSEC-2025-0081 | unknown | `unic-char-property` is unmaintained | |
| crates.io | unic-char-range 0.9.0 src-tauri/Cargo.lock |
RUSTSEC-2025-0075 | unknown | `unic-char-range` is unmaintained | |
| crates.io | unic-common 0.9.0 src-tauri/Cargo.lock |
RUSTSEC-2025-0080 | unknown | `unic-common` is unmaintained | |
| crates.io | unic-ucd-ident 0.9.0 src-tauri/Cargo.lock |
RUSTSEC-2025-0100 | unknown | `unic-ucd-ident` is unmaintained | |
| crates.io | unic-ucd-version 0.9.0 src-tauri/Cargo.lock |
RUSTSEC-2025-0098 | unknown | `unic-ucd-version` is unmaintained | |
| crates.io | zbus_names 3.0.0 src-tauri/Cargo.lock |
RUSTSEC-2026-0371 | unknown | `zbus_names` is unmaintained | |
| crates.io | zbus_names 4.3.4 src-tauri/Cargo.lock, tests/portal-chooser/fake-portal/Cargo.lock |
RUSTSEC-2026-0371 | unknown | `zbus_names` is unmaintained | |
| crates.io | zvariant 4.2.0 src-tauri/Cargo.lock |
RUSTSEC-2026-0370 | unknown | `zvariant` is unmaintained | |
| crates.io | zvariant 5.15.0 src-tauri/Cargo.lock |
RUSTSEC-2026-0370 | unknown | `zvariant` is unmaintained | |
| crates.io | zvariant_derive 4.2.0 src-tauri/Cargo.lock |
RUSTSEC-2026-0372 | unknown | `zvariant_derive` is unmaintained | |
| crates.io | zvariant_derive 5.15.0 src-tauri/Cargo.lock |
RUSTSEC-2026-0372 | unknown | `zvariant_derive` is unmaintained | |
| crates.io | zvariant 5.13.1 tests/portal-chooser/fake-portal/Cargo.lock |
RUSTSEC-2026-0370 | unknown | `zvariant` is unmaintained | |
| crates.io | zvariant_derive 5.13.1 tests/portal-chooser/fake-portal/Cargo.lock |
RUSTSEC-2026-0372 | unknown | `zvariant_derive` is unmaintained |