TO
Product
Tough
by Amazon · last CVE Apr 24, 2026
10
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 8Low 0
Watch

Add Tough to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-15093
8.6
1%
Jul 9
The tough library (Rust/crates.io) prior to version 0.7.1 does not properly verify the threshold of cryptographic signatures
Affected: before 0.7.1
CVE-2021-41149
8.1
1%
Oct 19
Tough provides a set of Rust libraries and tools for using and generating the update framework (TUF) repositories
Affected: before 0.12.0
Showing 2