Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

tuf

4 known vulnerabilities (2 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 2 high
Registry
PyPI

Advisories 4

  • Client metadata path-traversal in python-tuf

    Affected: fixed in 0.19.0.

  • Invalid root may become trusted root in The Update Framework (TUF)

    Affected: fixed in 0.12.0; fixed in 0.12.0.

  • TUF (aka The Update Framework) through 0.12.1 has Improper Verification of a Cryptographic Signature.

    Affected: fixed in 0.12.2; fixed in 0.12.2.

  • TUF (aka The Update Framework) 0.7.2 through 0.12.1 allows Uncontrolled Resource Consumption.

    Affected: from 0.7.5, fixed in 0.12.2; from 0.7.2, fixed in 0.12.2.