BELL-CVE-2026-24686

Bulletin has no description...

CVE-2026-24686

go-tuf is a Go implementation of The Update Framework TUF. go-tuf's TAP 4 Multirepo Client uses the map file repository name string repoName as a filesystem path component when selecting the local metadata cache directory. Starting in version 2.0.0 and prior to version 2.4.1, if an application...

CVE-2026-24686 vulnerabilities

Vulnerabilities for packages: teleport, tekton-chains, kyverno, policy-controller, gh, ko, trivy, falcoctl, skaffold, crossplane, goreleaser, tkn, kyverno-notation-aws, docker, trivy-operator, buildkitd, spire-server, tflint, gitsign, zarf, flux-source-controller, kubescape, zot, witness, vexctl,...