All products

github.com/theupdateframework/go-tuf

Go · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Go-tuf Improperly handles multiple key IDs for the same public keys in attacker-controlled metadataGHSA-3633-5H82-39PQ · GO-2022-1004Version ranges need review. github.com/theupdateframework/go-tuf Go Low Fix reported
Improper Validation of Integrity Check Value in go-tufCVE-2022-29173 · GHSA-66X3-6CW3-V5GJVersion ranges need review. github.com/theupdateframework/go-tufRed Hat Advanced Cluster Security 3/advanced-cluster-security/rhacs-docs-rhel8 GoRed Hat High Fix reported