https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 07:09:03 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-31535 EUVD-2026-31535 https://cve.radiocsirt.org/vuln/euvd-2026-31535 https://cve.radiocsirt.org/vuln/fkie_cve-2021-41149 <p>Tough provides a set of Rust libraries and tools for using and generating the update framework (TUF) repositories. The tough library, prior to 0.12.0, does not properly sanitize target names when caching a repository, or when saving specific targets to an output directory. When targets are cached or saved, files could be overwritten with arbitrary content anywhere on the system. A fix is available in version 0.12.0. No workarounds to this issue are known.</p> <p>Tough provides a set of Rust libraries and tools for using and generating the update framework (TUF) repositories. The tough library, prior to 0.12.0, does not properly sanitize target names when caching a repository, or when saving specific targets to an output directory. When targets are cached or saved, files could be overwritten with arbitrary content anywhere on the system. A fix is available in version 0.12.0. No workarounds to this issue are known.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-41149 https://cve.radiocsirt.org/vuln/ghsa-x3r5-q6mj-m485 <p><strong>Affected:</strong> crates.io: tough</p> <p>### Impact The tough library, prior to 0.12.0, does not properly sanitize target names when caching a repository, or when saving specific targets to an output directory. When targets are cached or saved, files could be overwritten with arbitrary content anywhere on the system.</p> <p>AWS would like to thank https://github.com/jku for reporting this issue.</p> <p>### Patches A fix is available in version 0.12.0.</p> <p>### Workarounds No workarounds to this issue are known.</p> <p><strong>Affected:</strong> crates.io: tough</p> <p>### Impact The tough library, prior to 0.12.0, does not properly sanitize target names when caching a repository, or when saving specific targets to an output directory. When targets are cached or saved, files could be overwritten with arbitrary content anywhere on the system.</p> <p>AWS would like to thank https://github.com/jku for reporting this issue.</p> <p>### Patches A fix is available in version 0.12.0.</p> <p>### Workarounds No workarounds to this issue are known.</p> https://cve.radiocsirt.org/vuln/ghsa-x3r5-q6mj-m485 https://cve.radiocsirt.org/vuln/gsd-2021-41149 gsd-2021-41149 https://cve.radiocsirt.org/vuln/gsd-2021-41149