{"action":"Upgrade tuf to 0.16.0 or later.","affected":[{"fixed":"0.16.0","introduced":"0.14.0"}],"component":"tuf","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["0.16.0"],"ghsa_id":"GHSA-r7vq-6425-j94w","id":"tcs_01M5KFXGFBJS6ZT8ZDKDPATX7D","modified_at":"2024-12-06T05:36:16.060111Z","published_at":"2022-09-15T03:35:12Z","references":["https://osv.dev/vulnerability/GHSA-r7vq-6425-j94w","https://github.com/theupdateframework/python-tuf/security/advisories/GHSA-pwqf-9h7j-7mv8","https://github.com/theupdateframework/python-tuf/security/advisories/GHSA-r7vq-6425-j94w","https://github.com/theupdateframework/python-tuf/pull/1218","https://github.com/theupdateframework/tuf/pull/1101","https://github.com/theupdateframework/python-tuf"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-r7vq-6425-j94w","url":"https://osv.dev/vulnerability/GHSA-r7vq-6425-j94w"}],"summary":"Python-TUF vulnerable to incorrect threshold signature computation for new root metadata"}