theupdateframework vulnerabilities
8 published CVEs name theupdateframework among the affected products.
- 8Published CVEs8 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-123806
python-tuf: Platform-dependent delegation path matching
theupdateframework · python-tuf
Medium4.0 - CVE-2026-24686
go-tuf Path Traversal in TAP 4 Multirepo Client Allows Arbitrary File Write via Malicious Repository Names
theupdateframework · go-tuf
Medium4.7 - CVE-2026-23992
go-tuf improperly validates the configured threshold for delegations
theupdateframework · go-tuf
Medium5.9 - CVE-2026-23991
go-tuf affected by client DoS via malformed server response
theupdateframework · go-tuf
Medium5.9 - CVE-2024-47534
Incorrect delegation lookups can make go-tuf download the wrong artifact
theupdateframework · go-tuf
High8.2 - CVE-2022-29173
No protection against rollback attacks in go-tuf
theupdateframework · go-tuf
High8.0 - CVE-2021-41131
Client metadata path-traversal in python-tuf
theupdateframework · python-tuf
High7.5 - CVE-2020-15163
Invalid root may become trusted root in The Update Framework (TUF)
theupdateframework · tuf
High8.7