Skip to content
OpenAdvisories

Package · Ubuntu

python-tuf

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 4.0
    CVE-2026-123806

    tuf has platform-dependent delegation path matching

    python-tuf is a Python reference implementation of The Update Framework (TUF). Prior to 7.0.0, DelegatedRole._is_target_in_pathpattern in tuf/api/_payload.py uses fnmatch.fnmatch, which applies os.path.normcase before matching and makes delegation path author…

    theupdateframework python-tuf tuf python-tuf Ubuntu PyPI