Description
TUF (aka The Update Framework) 0.7.2 through 0.12.1 allows Uncontrolled Resource Consumption.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | tuf | >= 0.7.2, < 0.12.2 | 0.12.2 | GHSA-2828-9vh6-9m6j |
| PyPI | tuf | >= 0.7.5, < 0.12.2 | 0.12.2 | PYSEC-2020-146 |