crates.io/tough

awslabs/tough is Missing Delegated Metadata Validation

Modified: 9/10/2026

Improper verification of signature threshold in tough

Modified: 7/8/2026

tough root metadata version is not checked for sequential versioning

Modified: 10/14/2025

tough timestamp metadata is cached when it fails snapshot rollback check

Modified: 10/14/2025

awslabs/tough Delegated Roles have a Signature Threshold Bypass

Modified: 9/10/2026

tough cyclic delegation graphs are not detected

Modified: 4/2/2025

tough failure to detect delegated target rollback

Modified: 10/14/2025

Improper sanitization of delegated role names

Modified: 2/4/2026

tough terminating targets role delegations are not respected

Modified: 10/14/2025

Improper sanitization of target names

Modified: 7/8/2026

Improper uniqueness verification of signature threshold

Modified: 2/4/2026