GO-2026-4348

vendorUSosv

Client DoS via malformed server response in github.com/theupdateframework/go-tuf

view advisory published 2026-02-02Licence: per source

Client DoS via malformed server response in github.com/theupdateframework/go-tuf

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-23991UShigh7.5—
go-tuf is a Go implementation of The Update Framework (TUF). Starting in version 2.0.0 and prior to version 2.3.1, if the TUF repository (or any of its mirrors) returns invalid TUF…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan