tough vulnerabilities (crates.io)
10 vulnerabilities.
-
toughcrates.io Missing Delegated Metadata Validation in awslabs/tough 7.1 High -
toughcrates.io Signature Threshold Bypass in awslabs/tough Delegated Roles 7.0 High -
toughcrates.io tough cyclic delegation graphs are not detected 2.7 Low -
toughcrates.io Improper timestamp caching during snapshot rollback in tough 5.7 Medium -
toughcrates.io Failure to detect delegated target rollback in tough 5.7 Medium -
toughcrates.io Terminating targets role delegations are not respected in tough 5.7 Medium -
toughcrates.io Root metadata version not validated in tough 5.7 Medium -
toughcrates.io Improper sanitization of delegated role names in tough 8.2 High -
toughcrates.io Improper sanitization of target names in tough 8.2 High -
toughcrates.io Improper verification of signature threshold in tough 8.6 High