TI-2026-19908 CVE-2026-24686 · GHSA-jqc5-w2xx-5vq4
go-tuf Path Traversal in TAP 4 Multirepo Client Allows Arbitrary File Write via Malicious Repository Names
Priority MEDIUM 55
go-tuf is a Go implementation of The Update Framework (TUF).
Vulnerabilities
4 records
TI-2026-19333 CVE-2026-23992 · GHSA-fphv-w9fq-2525
go-tuf improperly validates the configured threshold for delegations
Priority LOW 32
go-tuf is a Go implementation of The Update Framework (TUF).
TI-2026-19332 CVE-2026-23991 · GHSA-846p-jg2w-w324
go-tuf affected by client DoS via malformed server response
Priority LOW 34
go-tuf is a Go implementation of The Update Framework (TUF).
TI-2022-11717 CVE-2022-29173 · GHSA-66x3-6cw3-v5gj
No protection against rollback attacks in go-tuf
Priority MEDIUM 41
go-tuf is a Go implementation of The Update Framework (TUF).