CVE-2025-2886 Terminating targets role delegations are not respected in tough

Missing validation of terminating delegation causes the client to continue searching the defined delegation list, even after searching a terminating delegation. This could cause the client to fetch a target from an incorrect source, altering the target contents. Users should upgrade to tough...

CVE-2025-2886

Missing validation of terminating delegation causes the client to continue searching the defined delegation list, even after searching a terminating delegation. This could cause the client to fetch a target from an incorrect source, altering the target contents. Users should upgrade to tough...

PT-2025-13409

Name of the Vulnerable Software and Affected Versions tough versions prior to 0.20.0 Description The issue arises from missing validation of terminating delegation, causing the client to continue searching the defined delegation list even after encountering a terminating delegation. This could le...