Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

cargo

tuftool

cargo

Utility for creating and signing The Update Framework (TUF) repositories

View on github.com · View on crates.io

Security Advisories for tuftool in cargo

High
3 months ago

awslabs/tough is Missing Delegated Metadata Validation GSA_kwCzR0hTQS00djU4LThwMjgtMnJxM84ABWMY

cargo tuftool, tough
High
3 months ago

awslabs/tough Delegated Roles have a Signature Threshold Bypass GSA_kwCzR0hTQS04bTdjLThtMzktcnY0eM4ABWMX

cargo tuftool, tough
Potential
Low
over 1 year ago

tough cyclic delegation graphs are not detected GSA_kwCzR0hTQS1qOHgyLTc3N3AtMjNmY84ABGGD

cargo tough
Potential
Moderate
over 1 year ago

tough terminating targets role delegations are not respected GSA_kwCzR0hTQS12NHdyLWozdzYtbXhxY84ABGGC

cargo tough
Potential
Moderate
over 1 year ago

tough root metadata version is not checked for sequential versioning GSA_kwCzR0hTQS01dm1wLW01djItaHg0N84ABGGB

cargo tough
Potential
Moderate
over 1 year ago

tough timestamp metadata is cached when it fails snapshot rollback check GSA_kwCzR0hTQS03NmczLTM4anYtd3hoNM4ABGFA

cargo tough
Potential
Moderate
over 1 year ago

tough failure to detect delegated target rollback GSA_kwCzR0hTQS1xNnI5LXI5cHctNGNmN84ABGE_

cargo tough
Potential
High
over 4 years ago

Improper sanitization of delegated role names GSA_kwCzR0hTQS1yNTZxLXZ2M2MtNmc5Y80WnQ

cargo tough
Potential
High
over 4 years ago

Improper sanitization of target names GSA_kwCzR0hTQS14M3I1LXE2bWotbTQ4Nc0WnA

cargo tough
Potential
High
almost 5 years ago

Improper verification of signature threshold in tough MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVxMnItOTJmOS00bTQ5

cargo tough

Filter by Severity

High 5 Moderate 4 Low 1