Skip to content
OpenAdvisories

Package · PyPI

tuf

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2021-41131

    Client metadata path-traversal in python-tuf

    python-tuf is a Python reference implementation of The Update Framework (TUF). In both clients (`tuf/client` and `tuf/ngclient`), there is a path traversal vulnerability that in the worst case can overwrite files ending in `.json` anywhere on the client syste…

    theupdateframework python-tuf tuf PyPI
  • High 8.7
    CVE-2020-15163

    Invalid root may become trusted root in The Update Framework (TUF)

    Python TUF (The Update Framework) reference implementation before version 0.12 it will incorrectly trust a previously downloaded root metadata file which failed verification at download time. This allows an attacker who is able to serve multiple new versions …

    theupdateframework tuf tuf PyPI