theupdateframework go-tuf vulnerabilities
5 published CVEs name theupdateframework go-tuf among the affected products.
- Published CVEs
- 5
- Last 12 months
- 3
- Critical
- 0
- Known exploited
- 0
Critical 0High 2Medium 3Low 0Not scored 0
CVEs per yearBy the year they were published
- 20221
- 20241
- 20263
Newest CVEs
- CVE-2026-24686
go-tuf Path Traversal in TAP 4 Multirepo Client Allows Arbitrary File Write via Malicious Repository Names
theupdateframework · go-tuf
Medium4.7 - CVE-2026-23992
go-tuf improperly validates the configured threshold for delegations
theupdateframework · go-tuf
Medium5.9 - CVE-2026-23991
go-tuf affected by client DoS via malformed server response
theupdateframework · go-tuf
Medium5.9 - CVE-2024-47534
Incorrect delegation lookups can make go-tuf download the wrong artifact
theupdateframework · go-tuf
High8.2 - CVE-2022-29173
No protection against rollback attacks in go-tuf
theupdateframework · go-tuf
High8.0