TUF (aka The Update Framework) through 0.12.1 has Improper Verification of a Cryptographic Signature.

Original description

The description as published by the source.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

References

• patch github.com