LOWGo
GHSA-3633-5h82-39pq· GO-2022-1004Go-tuf Improperly handles multiple key IDs for the same public keys in attacker-controlled metadata
Modified: 5/29/2026
package
Go/github.com/theupdateframework/go-tuf
pkg:go/github.com/theupdateframework/go-tuf
HIGH8.0Go
GHSA-66x3-6cw3-v5gj· CVE-2022-29173, GO-2022-0444Improper Validation of Integrity Check Value in go-tuf
Modified: 11/8/2023
—Go
GO-2022-0444· CVE-2022-29173, GHSA-66x3-6cw3-v5gjVersion rollback attack in github.com/theupdateframework/go-tuf
Modified: 5/20/2024
—Go
GO-2022-1004· GHSA-3633-5h82-39pqImproper handling of keys in github.com/theupdateframework/go-tuf
Modified: 5/20/2024