CVE-2026-23991

go-tuf is a Go implementation of The Update Framework TUF. Starting in version 2.0.0 and prior to version 2.3.1, if the TUF repository or any of its mirrors returns invalid TUF metadata JSON valid JSON but not well formed TUF metadata, the client will panic during parsing, causing a denial of...

CVE-2026-23991 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, cosign, gitsign, falcoctl, tflint, zarf, spire-server, crossplane, witness, policy-controller, buildkitd, sigstore-scaffolding, trivy-operator, zot, aactl, kyverno-notation-aws, ratify, kyverno, goreleaser, tkn, trivy, kubescape,...

CVE-2026-23991

creationtimestamp| type| source ---|---|--- 2026-01-22 05:19:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcygrg6gy32t 2026-01-24 21:23:10+00:00| seen| https://gist.github.com/alon710/8f0590d74887d1a2e3248d957e30ec8e 2026-01-24 22:20:35+00:00| seen|...