Skip to content
Amazon Tough vulnerabilities
-
amazon tough, tuftool +1 more
Multiple Path Traversal Variants in awslabs/tough
CVE-2026-6968
7.1 High
-
amazon tough, tuftool +1 more
Missing Delegated Metadata Validation in awslabs/tough
CVE-2026-6967
Fix available
7.1 High
-
amazon tough, tuftool +1 more
Signature Threshold Bypass in awslabs/tough Delegated Roles
CVE-2026-6966
Fix available
7.0 High
-
amazon tough
Improper timestamp caching during snapshot rollback in tough
CVE-2025-2888
Fix available
5.7 Medium
-
amazon tough
Failure to detect delegated target rollback in tough
CVE-2025-2887
Fix available
5.7 Medium
-
amazon tough
Terminating targets role delegations are not respected in tough
CVE-2025-2886
Fix available
5.7 Medium
-
amazon tough
Root metadata version not validated in tough
CVE-2025-2885
Fix available
5.7 Medium
-
amazon tough
Improper sanitization of delegated role names in tough
CVE-2021-41150
Fix available
8.2 High
-
amazon tough
Improper sanitization of target names in tough
CVE-2021-41149
Fix available
8.2 High
-
amazon tough
Improper verification of signature threshold in tough
CVE-2020-15093
Fix available
8.6 High