← All advisories

Critical severityNVD Advisory· Published Feb 5, 2020· Updated Aug 4, 2024

CVE-2020-6174

CVE-2020-6174

Description

TUF (aka The Update Framework) through 0.12.1 has Improper Verification of a Cryptographic Signature.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
tufPyPI	< 0.12.2	0.12.2

Affected products

2

TUF/The Update Frameworkdescription
ghsa-coords
pkg:pypi/tuf
Range: < 0.12.2

Patches

Vulnerability mechanics

References

7

github.com/advisories/GHSA-pwqf-9h7j-7mv8ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-6174ghsaADVISORY
github.com/pypa/advisory-database/tree/main/vulns/tuf/PYSEC-2020-147.yamlghsaWEB
github.com/theupdateframework/python-tuf/commit/2977188139d065ff3356c3cb4aec60c582b57e0eghsaWEB
github.com/theupdateframework/tuf/pull/974ghsax_refsource_CONFIRMWEB
github.com/theupdateframework/tuf/releases/tag/v0.12.2ghsaWEB
github.com/theupdateframework/tuf/security/advisories/GHSA-pwqf-9h7j-7mv8ghsaWEB

News mentions

0

No linked articles in our index yet.