{"action":"Upgrade tuf to 0.12.2 or later.","affected":[{"fixed":"0.12.2","introduced":"0.7.5"}],"component":"tuf","cve_ids":["CVE-2020-6173"],"ecosystem":"PyPI","epss":0.01758,"exploited":false,"fixed_versions":["0.12.2"],"ghsa_id":"GHSA-2828-9vh6-9m6j","id":"tcs_01M5KG9J91V96CPH3H3J127H6Z","modified_at":"2023-11-08T04:03:56.811426Z","published_at":"2020-01-14T19:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-146","https://github.com/theupdateframework/tuf/issues/973","https://github.com/theupdateframework/tuf/commits/develop","https://github.com/advisories/GHSA-2828-9vh6-9m6j"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-146","url":"https://osv.dev/vulnerability/PYSEC-2020-146"}],"summary":"TUF (aka The Update Framework) 0.7.2 through 0.12.1 allows Uncontrolled Resource Consumption."}