golang-github-theupdateframework-go-tuf vulnerabilities (Ubuntu)

3 vulnerabilities.

• golang-github-theupdateframework-go-tuf Ubuntu go-tuf Path Traversal in TAP 4 Multirepo Client Allows Arbitrary File Write via Malicious Repository Names CVE-2026-24686 Fix available 4.7 MediumJanuary 26, 2026
• golang-github-theupdateframework-go-tuf Ubuntu go-tuf improperly validates the configured threshold for delegations CVE-2026-23992 Fix available 5.9 MediumJanuary 21, 2026
• golang-github-theupdateframework-go-tuf Ubuntu go-tuf affected by client DoS via malformed server response CVE-2026-23991 Fix available 5.9 MediumJanuary 21, 2026