PyPI/tuf CVE-2020-6173: medium 5.3, EPSS 1.76%
Client Denial of Service on TUF
Action: Upgrade tuf to 0.12.2 or later.
pip install tuf==0.12.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.7.2 | 0.12.2 | - |
Fixed versions
| 0.12.2 |
Sources
- osv: GHSA-2828-9vh6-9m6j
- https://github.com/theupdateframework/tuf/security/advisories/GHSA-2828-9vh6-9m6j
- https://nvd.nist.gov/vuln/detail/CVE-2020-6173
- https://github.com/theupdateframework/tuf/issues/973
- https://github.com/pypa/advisory-database/tree/main/vulns/tuf/PYSEC-2020-146.yaml
- https://github.com/theupdateframework/tuf
- https://github.com/theupdateframework/tuf/commits/develop
CVE-2020-6173 · published · modified · JSON