Skip to content
OpenAdvisories

Package · Go

github.com/theupdateframework/go-tuf

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.0
    CVE-2022-29173

    No protection against rollback attacks in go-tuf

    go-tuf is a Go implementation of The Update Framework (TUF). go-tuf does not correctly implement the client workflow for updating the metadata files for roles other than the root role. Specifically, checks for rollback attacks are not implemented correctly me…

    theupdateframework go-tuf github.com/theupdateframework/go-tuf Go