tuf
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| tuf has platform-dependent delegation path matching | tufRed Hat OpenShift AI (RHOAI)/rhoai/odh-model-registry-job-async-upload-rhel9 | PyPIRed Hat | Medium | Fix reported | |
| Invalid root may become trusted root in The Update Framework (TUF) | tuf | PyPI | Medium | Fix reported | |
| Client metadata path-traversal | tuf | PyPI | Medium | Fix reported | |
| Python-TUF vulnerable to incorrect threshold signature computation for new root metadata | tuf | PyPI | Low | Fix reported | |
| Incorrect threshold signature computation in TUF | tuf | PyPI | Critical | Fix reported | |
| Client Denial of Service on TUF | tuf | PyPI | Medium | Fix reported | |
| tuf's Metadata API: Targets.get_delegated_role() is missing input validation | tuf | PyPI | Low | Fix reported |