PyPI/tuf CVE-2020-6173: unknown, EPSS 1.76%
TUF (aka The Update Framework) 0.7.2 through 0.12.1 allows Uncontrolled Resource Consumption.
Action: Upgrade tuf to 0.12.2 or later.
pip install tuf==0.12.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.7.5 | 0.12.2 | - |
Fixed versions
| 0.12.2 |
Sources
- osv: PYSEC-2020-146
- https://github.com/theupdateframework/tuf/issues/973
- https://github.com/theupdateframework/tuf/commits/develop
- https://github.com/advisories/GHSA-2828-9vh6-9m6j
CVE-2020-6173 · published · modified · JSON