Known vulnerabilities in The Update Framework (TUF)

Vendor: The Update Framework
Software: The Update Framework (TUF)
Software CPE: cpe:2.3:a:the_update_framework:the_update_framework_tuf:*:*:*:*:*:*:*:*
Website: https://theupdateframework.github.io/
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting The Update Framework (TUF) The Update Framework (TUF) is affected by 7 known vulnerabilities: 1 high, 3 medium, 3 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131745 - Improper Handling of Case Sensitivity
 CWE-178 Low
No
No
 7.0.0 18.05.2026 SB2026051891
#VU131744 - Improper input validation
 CWE-20 Low
No
No
 3.1.1 16.02.2024 SB2024021640
#VU131743 - Incorrect Authorization
 CWE-863 Low
No
No
 0.16.0 06.09.2022 SB2022090678
#VU57574 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-41131		 CWE-22 Medium
No
No
 0.19.0 20.10.2021 SB2021102010
#VU131742 - Insufficient Verification of Data Authenticity
CVE-2020-15163		 CWE-345 Medium
No
No
 0.12.0 09.09.2020 SB2020090941
#VU29694 - Improper Verification of Cryptographic Signature
CVE-2020-6174		 CWE-347 High
No
No
 0.12.2 13.07.2020 SB2020020522
SB2020071308
#VU24498 - Resource exhaustion
CVE-2020-6173		 CWE-400 Medium
No
No
 0.12.2 22.01.2020 SB2020012226