https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 02:34:46 +0000 https://cve.radiocsirt.org/vuln/cve-2026-6967 <p><strong>Affected:</strong> AWS tough, AWS tuftool</p> <p>Missing expiration, hash, and length enforcement in delegated metadata validation in awslabs/tough before tough-v0.22.0 allows remote authenticated users with delegated signing authority to bypass TUF specification integrity checks for delegated targets metadata and poison the local metadata cache, because load_delegations does not apply the same validation checks as the top-level targets metadata path.</p> <p>We recommend you upgrade to tough-v0.22.0 / tuftool-v0.15.0.</p> <p><strong>Affected:</strong> AWS tough, AWS tuftool</p> <p>Missing expiration, hash, and length enforcement in delegated metadata validation in awslabs/tough before tough-v0.22.0 allows remote authenticated users with delegated signing authority to bypass TUF specification integrity checks for delegated targets metadata and poison the local metadata cache, because load_delegations does not apply the same validation checks as the top-level targets metadata path.</p> <p>We recommend you upgrade to tough-v0.22.0 / tuftool-v0.15.0.</p> https://cve.radiocsirt.org/vuln/cve-2026-6967