Skip to content
OpenAdvisories

Product · theupdateframework

tuf

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2020-15163

    Invalid root may become trusted root in The Update Framework (TUF)

    Python TUF (The Update Framework) reference implementation before version 0.12 it will incorrectly trust a previously downloaded root metadata file which failed verification at download time. This allows an attacker who is able to serve multiple new versions …

    theupdateframework tuf tuf PyPI