CVE-2026-123806

python-tuf is a Python reference implementation of The Update Framework TUF. Prior to 7.0.0, DelegatedRole.istargetinpathpattern in tuf/api/payload.py uses fnmatch.fnmatch, which applies os.path.normcase before matching and makes delegation path authorization case-insensitive on Windows. When a T...

EUVD-2026-120403

python-tuf is a Python reference implementation of The Update Framework TUF. Prior to 7.0.0, DelegatedRole.istargetinpathpattern in tuf/api/payload.py uses fnmatch.fnmatch, which applies os.path.normcase before matching and makes delegation path authorization case-insensitive on Windows. When a T...

CVE-2026-123806 python-tuf: Platform-dependent delegation path matching

python-tuf is a Python reference implementation of The Update Framework TUF. Prior to 7.0.0, DelegatedRole.istargetinpathpattern in tuf/api/payload.py uses fnmatch.fnmatch, which applies os.path.normcase before matching and makes delegation path authorization case-insensitive on Windows. When a T...