PyPI/tuf: low

tuf's Metadata API: Targets.get_delegated_role() is missing input validation

Action: Upgrade tuf to 3.1.1 or later.

pip install tuf==3.1.1

Affected

Fixed versions

Sources

• osv: GHSA-77hh-43cm-v8j6
• https://github.com/theupdateframework/python-tuf/security/advisories/GHSA-77hh-43cm-v8j6
• https://github.com/theupdateframework/python-tuf/commit/77cb66bc879d108c449ba4c46dfb0e3a9e57a785
• https://github.com/theupdateframework/python-tuf/commit/eb4834d9205d07ae164bc6c5b97787585c0acfdc
• https://github.com/theupdateframework/python-tuf
• https://github.com/theupdateframework/python-tuf/releases/tag/v3.1.1

published 2024-02-16T23:35:39Z · modified 2024-02-16T23:35:39Z · JSON