Skip to content
OpenAdvisories

Package · Go

github.com/theupdateframework/go-tuf

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low —
    GHSA-3633-5h82-39pq

    Go-tuf Improperly handles multiple key IDs for the same public keys in attacker-controlled metadata

    ### Issue If an attacker is able to control a threshold of keys to insert the same public key more than once with different key IDs into signed, trusted metadata on a TUF repository, then go-tuf [clients](https://github.com/theupdateframework/go-tuf#client) <…

    github.com/theupdateframework/go-tuf Go