{"action":"Upgrade tuf to 3.1.1 or later.","affected":[{"fixed":"3.1.1","introduced":"2.0.0"}],"component":"tuf","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["3.1.1"],"ghsa_id":"GHSA-77hh-43cm-v8j6","id":"tcs_01M5KF59QR9K7Q9XYMG0PNH7Z7","modified_at":"2024-02-16T23:35:39Z","published_at":"2024-02-16T23:35:39Z","references":["https://osv.dev/vulnerability/GHSA-77hh-43cm-v8j6","https://github.com/theupdateframework/python-tuf/security/advisories/GHSA-77hh-43cm-v8j6","https://github.com/theupdateframework/python-tuf/commit/77cb66bc879d108c449ba4c46dfb0e3a9e57a785","https://github.com/theupdateframework/python-tuf/commit/eb4834d9205d07ae164bc6c5b97787585c0acfdc","https://github.com/theupdateframework/python-tuf","https://github.com/theupdateframework/python-tuf/releases/tag/v3.1.1"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-77hh-43cm-v8j6","url":"https://osv.dev/vulnerability/GHSA-77hh-43cm-v8j6"}],"summary":"tuf's Metadata API: Targets.get_delegated_role() is missing input validation"}