PT-2025-13406

Name of the Vulnerable Software and Affected Versions tough versions prior to 0.20.0 Description The issue arises from missing validation of the root metadata version number, allowing an actor to supply an arbitrary version number to the client. This could lead to the client trusting an outdated ...