PyPI/tuf

Client Denial of Service on TUF

Modified: 11/18/2024

tuf's Metadata API: Targets.get_delegated_role() is missing input validation

Modified: 2/16/2024

Invalid root may become trusted root in The Update Framework (TUF)

Modified: 9/10/2026

Incorrect threshold signature computation in TUF

Modified: 11/18/2024

tuf has platform-dependent delegation path matching

Modified: 9/10/2026

Python-TUF vulnerable to incorrect threshold signature computation for new root metadata

Modified: 12/6/2024

Client metadata path-traversal

Modified: 7/8/2026

Modified: 11/8/2023

Modified: 11/8/2023

Modified: 11/8/2023

Modified: 1/14/2025