TU
Product
The Update Framework
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 1Low 0
Watch
Add The Update Framework to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-6174 | 9.8 | Feb 5 | TUF (aka The Update Framework) through 0.12.1 has Improper Verification of a Cryptographic Signature Affected: through 0.12.1 |
| CVE-2021-41131 | 8.7 | Oct 19 | python-tuf is a Python reference implementation of The Update Framework (TUF) Affected: through 0.18.1 |
| CVE-2020-15163 | 8.2 | Sep 9 | Python TUF (The Update Framework) reference implementation before version 0.12 it will incorrectly trust a previously downloaded root metadata file which failed verification at… Affected: before 0.12.0 |
| CVE-2020-6173 | 5.3 | Jan 14 | TUF (aka The Update Framework) 0.7.2 through 0.12.1 allows Uncontrolled Resource Consumption Affected: 0.7.2 through 0.12.1 |
Showing 4