Vulnerabilities
Last updated 1 hour ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
tuf
|
tuf has platform-dependent delegation path matching | Medium Risk 4.0 | 5 months ago | 8 hours ago |
omglucidesotuff
|
Malicious code in omglucidesotuff (npm) | Unknown | 3 months ago | 1 month ago |
tuftool
|
awslabs/tough is Missing Delegated Metadata Validation | Medium Risk 5.9 | 6 months ago | 2 months ago |
|
tuftool
|
awslabs/tough Delegated Roles have a Signature Threshold Bypass | Medium Risk 5.3 | 6 months ago | 2 months ago |
github.com/theupdateframework/go-tuf/v2
|
go-tuf improperly validates the configured threshold for delegations | Medium Risk 5.9 | 9 months ago | 2 months ago |
|
github.com/theupdateframework/go-tuf/v2
|
go-tuf Path Traversal in TAP 4 Multirepo Client Allows Arbitrary File Write via Malicious Repository Names | Medium Risk 4.7 | 9 months ago | 2 months ago |
|
github.com/theupdateframework/go-tuf/v2
|
go-tuf affected by client DoS via malformed server response | Medium Risk 5.9 | 9 months ago | 2 months ago |
|
github.com/theupdateframework/go-tuf/v2
|
Incorrect delegation lookups can make go-tuf download the wrong artifact | High Risk 7.5 | 2 years ago | 2 months ago |
|
tuf
|
Invalid root may become trusted root in The Update Framework (TUF) | High Risk 8.7 | 6 years ago | 2 months ago |
|
nottuff11
|
Malicious code in nottuff11 (npm) | Unknown | 3 months ago | 2 months ago |
|
backupsitetuff6
|
Malicious code in backupsitetuff6 (npm) | Unknown | 3 months ago | 2 months ago |
|
desmosistuff
|
Malicious code in desmosistuff (npm) | Unknown | 2 months ago | 2 months ago |
|
github.com/theupdateframework/go-tuf/v2
|
Client DoS via malformed server response in github.com/theupdateframework/go-tuf | Unknown | 9 months ago | 3 months ago |
|
timmytuffknuckles9
|
Malicious code in timmytuffknuckles9 (npm) | Unknown | 3 months ago | 3 months ago |
|
timmytuffknuckles3
|
Malicious code in timmytuffknuckles3 (npm) | Unknown | 3 months ago | 3 months ago |
|
timmytuffknuckles6
|
Malicious code in timmytuffknuckles6 (npm) | Unknown | 3 months ago | 3 months ago |
|
nottuff1
|
Malicious code in nottuff1 (npm) | Unknown | 3 months ago | 3 months ago |
|
nottuff10
|
Malicious code in nottuff10 (npm) | Unknown | 3 months ago | 3 months ago |
|
nottuff12
|
Malicious code in nottuff12 (npm) | Unknown | 3 months ago | 3 months ago |
|
nottuff13
|
Malicious code in nottuff13 (npm) | Unknown | 3 months ago | 3 months ago |
|
nottuff14
|
Malicious code in nottuff14 (npm) | Unknown | 3 months ago | 3 months ago |
|
nottuff15
|
Malicious code in nottuff15 (npm) | Unknown | 4 months ago | 3 months ago |
|
nottuff8
|
Malicious code in nottuff8 (npm) | Unknown | 3 months ago | 3 months ago |
|
nottuff9
|
Malicious code in nottuff9 (npm) | Unknown | 3 months ago | 3 months ago |
|
nottuff7
|
Malicious code in nottuff7 (npm) | Unknown | 4 months ago | 3 months ago |
|
nottuff27
|
Malicious code in nottuff27 (npm) | Unknown | 3 months ago | 3 months ago |
|
nottuff28
|
Malicious code in nottuff28 (npm) | Unknown | 3 months ago | 3 months ago |
|
nottuff29
|
Malicious code in nottuff29 (npm) | Unknown | 3 months ago | 3 months ago |
|
nottuff3
|
Malicious code in nottuff3 (npm) | Unknown | 3 months ago | 3 months ago |
|
nottuff30
|
Malicious code in nottuff30 (npm) | Unknown | 3 months ago | 3 months ago |
|
nottuff5
|
Malicious code in nottuff5 (npm) | Unknown | 3 months ago | 3 months ago |
|
nottuff6
|
Malicious code in nottuff6 (npm) | Unknown | 3 months ago | 3 months ago |
|
nottuff4
|
Malicious code in nottuff4 (npm) | Unknown | 4 months ago | 3 months ago |
|
nottuff2
|
Malicious code in nottuff2 (npm) | Unknown | 3 months ago | 3 months ago |
|
nottuff20
|
Malicious code in nottuff20 (npm) | Unknown | 3 months ago | 3 months ago |
|
nottuff21
|
Malicious code in nottuff21 (npm) | Unknown | 3 months ago | 3 months ago |
|
nottuff22
|
Malicious code in nottuff22 (npm) | Unknown | 3 months ago | 3 months ago |
|
nottuff24
|
Malicious code in nottuff24 (npm) | Unknown | 3 months ago | 3 months ago |
|
nottuff26
|
Malicious code in nottuff26 (npm) | Unknown | 3 months ago | 3 months ago |
|
nottuff23
|
Malicious code in nottuff23 (npm) | Unknown | 4 months ago | 3 months ago |
|
nottuff25
|
Malicious code in nottuff25 (npm) | Unknown | 4 months ago | 3 months ago |
|
nottuff16
|
Malicious code in nottuff16 (npm) | Unknown | 3 months ago | 3 months ago |
|
nottuff17
|
Malicious code in nottuff17 (npm) | Unknown | 3 months ago | 3 months ago |
|
nottuff18
|
Malicious code in nottuff18 (npm) | Unknown | 3 months ago | 3 months ago |
|
nottuff19
|
Malicious code in nottuff19 (npm) | Unknown | 3 months ago | 3 months ago |
|
backupsitetuff9
|
Malicious code in backupsitetuff9 (npm) | Unknown | 3 months ago | 3 months ago |
|
backupsitetuff10
|
Malicious code in backupsitetuff10 (npm) | Unknown | 3 months ago | 3 months ago |
|
backupsitetuff3
|
Malicious code in backupsitetuff3 (npm) | Unknown | 3 months ago | 3 months ago |
|
tuf
|
Client metadata path-traversal | High Risk 7.5 | 5 years ago | 4 months ago |
|
github.com/gittuf/gittuf
|
gittuf's policy can be rolled back to prior valid versions | Medium Risk 6.0 | 6 months ago | 4 months ago |
Page 1