📦 Go Tuf

This vulnerability in go-tuf allows attackers to perform rollback attacks, causing clients to install older, potentially vulnerable software versions instead of current secure updates. It affects all ...

A denial-of-service vulnerability in go-tuf allows a compromised repository, mirror, or cache to crash client applications by sending malformed TUF metadata. This affects all systems using go-tuf vers...

This vulnerability in go-tuf allows a compromised or misconfigured TUF repository to set signature verification thresholds to zero, effectively disabling integrity checks. This enables unauthorized mo...