CVE-2020-6174: Linuxfoundation The Update Framework

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

TUF (aka The Update Framework) through 0.12.1 has Improper Verification of a Cryptographic Signature.

Affected products

• Linuxfoundation The Update Framework: up to and including 0.12.1

Published 2020-02-05. Last modified 2026-06-17.