Lucene search
The Update Framework Security Vulnerabilities - 2020
cve
Python TUF (The Update Framework) reference implementation before version 0.12 it will incorrectly trust a previously downloaded root metadata file which failed verification at download time. This allows an attacker who is able to serve multiple new versions of root metadata (i.e. by a person-in-th...
8.7CVSS
7.9AI Score
0.001EPSS
2020-09-09 06:15 PM
49
cve
TUF (aka The Update Framework) 0.7.2 through 0.12.1 allows Uncontrolled Resource Consumption.
5.3CVSS
5.2AI Score
0.001EPSS
2020-01-14 07:15 PM
53
cve
TUF (aka The Update Framework) through 0.12.1 has Improper Verification of a Cryptographic Signature.
9.8CVSS
9AI Score
0.002EPSS
2020-02-05 04:15 PM
66