Debian/golang-github-theupdateframework-go-tuf: high 7.5
go-tuf is a Go implementation of The Update Framework (TUF). Starting in version 2.0.0 and prior to version 2.3.1, if the TUF repository (or any of its mirrors) returns invalid TUF metadata JSON (vali
Action: Upgrade golang-github-theupdateframework-go-tuf to 2.4.1+0.7.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.4.1+0.7.0-1 | - |
Fixed versions
| 2.4.1+0.7.0-1 |
Sources
- osv: DEBIAN-CVE-2026-23991#Debian:14/golang-github-theupdateframework-go-tuf
- https://security-tracker.debian.org/tracker/CVE-2026-23991
published · modified · JSON