cve.bz

theupdateframework python-tuf vulnerabilities, newest first

Filter

By year: all 2026 2025 2024 2023 2022 2021

  1. 4.0CVE-2026-123806EPSS 0.1%

    python-tuf is a Python reference implementation of The Update Framework (TUF). Prior to 7.0.0, DelegatedRole._is_target_in_pathpattern in tuf/api/_payload.py uses fnmatch.fnmatch, which applies os.path.normcase before matching and makes de…