VendorsLinux Foundationthe_update_frameworkany version
Vulnerabilities

Linux Foundation The Linux Foundation The Update Framework (TUF) any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2020-6174
TUF (aka The Update Framework) through 0.12.1 has Improper Verification of a Cryptographic Signature.
Published 2020-02-05 · Modified
9.8EPSS 0.010
CVE-2021-41131
Client metadata path-traversal in python-tuf
Published 2021-10-19 · Modified
8.8EPSS 0.015
CVE-2020-15163
Invalid root may become trusted root in The Update Framework (TUF)
Published 2020-09-09 · Modified
8.7EPSS 0.007
CVE-2020-6173
TUF (aka The Update Framework) 0.7.2 through 0.12.1 allows Uncontrolled Resource Consumption.
Published 2020-01-14 · Modified
5.3EPSS 0.018