Theupdateframework Tuf vulnerabilities
- theupdateframework go-tuf go-tuf Path Traversal in TAP 4 Multirepo Client Allows Arbitrary File Write via Malicious Repository Names 4.7 Medium
- theupdateframework go-tuf go-tuf improperly validates the configured threshold for delegations 5.9 Medium
- theupdateframework go-tuf go-tuf affected by client DoS via malformed server response 5.9 Medium
- theupdateframework go-tuf Incorrect delegation lookups can make go-tuf download the wrong artifact 8.2 High
- theupdateframework go-tuf No protection against rollback attacks in go-tuf 8.0 High
- linuxfoundation the update framework, theupdateframework python-tuf +1 more Client metadata path-traversal in python-tuf 7.5 High
- linuxfoundation the update framework, theupdateframework tuf +1 more Invalid root may become trusted root in The Update Framework (TUF) 8.7 High