PyPI/tuf CVE-2021-41131: unknown, EPSS 1.45%

python-tuf is a Python reference implementation of The Update Framework (TUF). In both clients (`tuf/client` and `tuf/ngclient`), there is a path traversal vulnerability that in the worst case can ove

Action: Upgrade tuf to 0.19.0 or later.

pip install tuf==0.19.0

Affected

Fixed versions

Sources

• osv: PYSEC-2021-376
• https://github.com/theupdateframework/python-tuf/commit/4ad7ae48fda594b640139c3b7eae21ed5155a102
• https://github.com/theupdateframework/python-tuf/security/advisories/GHSA-wjw6-2cqr-j4qr
• https://github.com/theupdateframework/python-tuf/issues/1527

CVE-2021-41131 · published 2021-10-19T18:15:00Z · modified 2025-01-14T08:57:32.424418Z · JSON