theupdateframework

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

theupdateframework records in CISA KEV

No theupdateframework vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Go-tuf · all components

TI-2026-19908 CVE-2026-24686 · GHSA-jqc5-w2xx-5vq4

MEDIUM 55

go-tuf is a Go implementation of The Update Framework (TUF).

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00231 Published 2026-01-27 Partial fix · 2.4.1 CWE-22

TI-2022-11717 CVE-2022-29173 · GHSA-66x3-6cw3-v5gj

MEDIUM 41

go-tuf is a Go implementation of The Update Framework (TUF).

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0057 Published 2022-05-05 Partial fix · 0.3.0 CWE-354

TI-2026-19332 CVE-2026-23991 · GHSA-846p-jg2w-w324

LOW 34

go-tuf is a Go implementation of The Update Framework (TUF).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00581 Published 2026-01-22 Partial fix · 2.3.1 CWE-617

TI-2026-19333 CVE-2026-23992 · GHSA-fphv-w9fq-2525

LOW 32

go-tuf is a Go implementation of The Update Framework (TUF).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00215 Published 2026-01-22 Partial fix · 2.3.1 CWE-347