Description
TUF (aka The Update Framework) through 0.12.1 has Improper Verification of a Cryptographic Signature.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | tuf | < 0.12.2 | 0.12.2 | GHSA-pwqf-9h7j-7mv8 |
Critical · 9.8
CVE-2020-6174
EUVD-2020-0226GHSA-pwqf-9h7j-7mv8PYSEC-2020-147
Incorrect threshold signature computation in TUF
Published Feb 5, 2020 · Updated Aug 4, 2024 · Assigned by mitre