theupdateframework vulnerabilities
7 published CVEs name theupdateframework among the affected products.
- Published CVEs
- 7
- Last 12 months
- 3
- Critical
- 0
- Known exploited
- 0
Critical 0High 4Medium 3Low 0Not scored 0
CVEs per yearBy the year they were published
- 20201
- 20211
- 20221
- 20241
- 20263
Newest CVEs
- CVE-2026-24686
go-tuf Path Traversal in TAP 4 Multirepo Client Allows Arbitrary File Write via Malicious Repository Names
theupdateframework · go-tuf
Medium4.7 - CVE-2026-23992
go-tuf improperly validates the configured threshold for delegations
theupdateframework · go-tuf
Medium5.9 - CVE-2026-23991
go-tuf affected by client DoS via malformed server response
theupdateframework · go-tuf
Medium5.9 - CVE-2024-47534
Incorrect delegation lookups can make go-tuf download the wrong artifact
theupdateframework · go-tuf
High8.2 - CVE-2022-29173
No protection against rollback attacks in go-tuf
theupdateframework · go-tuf
High8.0 - CVE-2021-41131
Client metadata path-traversal in python-tuf
theupdateframework · python-tuf
High7.5 - CVE-2020-15163
Invalid root may become trusted root in The Update Framework (TUF)
theupdateframework · tuf
High8.7