Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

go

github.com/theupdateframework/go-tuf

go

View on github.com · View on proxy.golang.org

Security Advisories for github.com/theupdateframework/go-tuf in go

Low
about 3 years ago

Go-tuf Improperly handles multiple key IDs for the same public keys in attacker-controlled metadata GSA_kwCzR0hTQS0zNjMzLTVoODItMzlwcc4AAu1W

go github.com/theupdateframework/go-tuf
High
over 3 years ago

Improper Validation of Integrity Check Value in go-tuf GSA_kwCzR0hTQS02NngzLTZjdzMtdjVnas4AAqwc

go github.com/theupdateframework/go-tuf

Filter by Severity

Low 1 High 1