Linuxfoundation The Update Framework
4 CVEs affecting Linuxfoundation The Update Framework. Latest disclosed: 2021-10-19. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-6174 | Critical | 9.8 | 2020-02-05 | TUF (aka The Update Framework) through 0.12.1 has Improper Verification of a Cryptographic Signature. |
CVE-2020-15163 | High | 8.7 | 2020-09-09 | Python TUF (The Update Framework) reference implementation before version 0.12 it will incorrectly trust a previously downloaded root metadata file which faile… |
CVE-2021-41131 | High | 7.5 | 2021-10-19 | python-tuf is a Python reference implementation of The Update Framework (TUF). In both clients (`tuf/client` and `tuf/ngclient`), there is a path traversal vul… |
CVE-2020-6173 | Medium | 5.3 | 2020-01-14 | TUF (aka The Update Framework) 0.7.2 through 0.12.1 allows Uncontrolled Resource Consumption. |