A bug identified in this issue allows a partial filesystem scope bypass if glob characters are used within file dialog or drag-and-drop functionalities.
This PR fixes the issue by escaping glob characters.
mhfan / inyew
This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.
inyew
(9 total, 2 outdated)
Crate | Required | Latest | Status |
---|---|---|---|
yew | ^0.21 | 0.21.0 | up to date |
yew-router | ^0.18 | 0.18.0 | up to date |
wasm-logger | ^0.2 | 0.2.0 | up to date |
wasm-bindgen | ^0.2 | 0.2.100 | up to date |
log | ^0.4 | 0.4.27 | up to date |
rand | ^0.8 | 0.9.0 | out of date |
instant | ^0.1 | 0.1.13 | up to date |
getrandom | ^0.2 | 0.3.2 | out of date |
web-sys | ^0.3 | 0.3.77 | up to date |
intauri
(3 total, 1 outdated, 1 possibly insecure)
Crate | Required | Latest | Status |
---|---|---|---|
serde_json | ^1.0 | 1.0.140 | up to date |
serde | ^1.0 | 1.0.219 | up to date |
tauri ⚠️ | ^1.1 | 2.4.1 | out of date |
(1 total, 1 outdated)
Crate | Required | Latest | Status |
---|---|---|---|
tauri-build | ^1.1 | 2.1.1 | out of date |