The Update Framework (Linuxfoundation) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 38 known versions, newest CVE from 2021-10-19. Vendor: Linuxfoundation.

CVEs of The Update Framework

• CVE-2021-41131 - CVSS 8.7 (high), 2021-10-19: python-tuf is a Python reference implementation of The Update Framework (TUF). In both clients (`tuf/client` and `tuf/ngclient`), there is a path traversal…
• CVE-2020-15163 - CVSS 8.7 (high), 2020-09-09: Python TUF (The Update Framework) reference implementation before version 0.12 it will incorrectly trust a previously downloaded root metadata file which…
• CVE-2020-6174 - CVSS 9.8 (critical), 2020-02-05: TUF (aka The Update Framework) through 0.12.1 has Improper Verification of a Cryptographic Signature.
• CVE-2020-6173 - CVSS 5.3 (medium), 2020-01-14: TUF (aka The Update Framework) 0.7.2 through 0.12.1 allows Uncontrolled Resource Consumption.