CVE-2020-6173: Linuxfoundation The Update Framework

Medium severity, CVSS 5.3. EPSS: 1.8% chance of exploitation in the next 30 days.

TUF (aka The Update Framework) 0.7.2 through 0.12.1 allows Uncontrolled Resource Consumption.

Affected products

• Linuxfoundation The Update Framework: from 0.7.2, up to and including 0.12.1

Published 2020-01-14. Last modified 2026-06-17.