Skip to content
OpenAdvisories

Product · theupdateframework

python-tuf

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2021-41131

    Client metadata path-traversal in python-tuf

    python-tuf is a Python reference implementation of The Update Framework (TUF). In both clients (`tuf/client` and `tuf/ngclient`), there is a path traversal vulnerability that in the worst case can overwrite files ending in `.json` anywhere on the client syste…

    theupdateframework python-tuf tuf PyPI