Executive brief
Go-tuf Improperly handles multiple key IDs for the same public keys in attacker-controlled metadata
Affected products
- Go github.com/theupdateframework/go-tuf
Junglewise Threat Intelligence
Go-tuf Improperly handles multiple key IDs for the same public keys in attacker-controlled metadata
Severity: info ยท Published 2022-09-16
Technologies: github.com/theupdateframework/go-tuf (Go). Vendors: Go.