github.com/theupdateframework/go-tuf/v2 vulnerabilities (Go)
4 vulnerabilities.
-
github.com/theupdateframework/go-tuf/v2Go go-tuf Path Traversal in TAP 4 Multirepo Client Allows Arbitrary File Write via Malicious Repository Names 4.7 Medium -
github.com/theupdateframework/go-tuf/v2Go go-tuf improperly validates the configured threshold for delegations 5.9 Medium -
github.com/theupdateframework/go-tuf/v2Go go-tuf affected by client DoS via malformed server response 5.9 Medium -
github.com/theupdateframework/go-tuf/v2Go Incorrect delegation lookups can make go-tuf download the wrong artifact 8.2 High