THE Update Framework

DATE	CVE	VULNERABILITY TITLE	RISK
2021-10-19	CVE-2021-41131	Unspecified vulnerability in Linuxfoundation the Update Framework python-tuf is a Python reference implementation of The Update Framework (TUF). network high complexity linuxfoundation	8.7
2020-09-09	CVE-2020-15163	Insufficient Verification of Data Authenticity vulnerability in Linuxfoundation the Update Framework Python TUF (The Update Framework) reference implementation before version 0.12 it will incorrectly trust a previously downloaded root metadata file which failed verification at download time. network high complexity linuxfoundation CWE-345	8.2
2020-02-05	CVE-2020-6174	Improper Verification of Cryptographic Signature vulnerability in Linuxfoundation the Update Framework TUF (aka The Update Framework) through 0.12.1 has Improper Verification of a Cryptographic Signature. network low complexity linuxfoundation CWE-347 critical	9.8
2020-01-14	CVE-2020-6173	Resource Exhaustion vulnerability in Linuxfoundation the Update Framework TUF (aka The Update Framework) 0.7.2 through 0.12.1 allows Uncontrolled Resource Consumption. network low complexity linuxfoundation CWE-400	5.3