github.com/theupdateframework/go-tuf vulnerabilities (Go)

2 vulnerabilities.

• github.com/theupdateframework/go-tuf Go Go-tuf Improperly handles multiple key IDs for the same public keys in attacker-controlled metadata GHSA-3633-5h82-39pq Fix available No scoreSeptember 16, 2022
• github.com/theupdateframework/go-tuf Go No protection against rollback attacks in go-tuf CVE-2022-29173 Fix available 8.0 HighMay 5, 2022