Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

tough — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in tough, with AI-generated Chinese analysis, references, and POCs.

Vendor: awslabs

CVE IDTitleCVSSSeverityPublished
CVE-2026-6968 Multiple Path Traversal Variants in awslabs/tough CWE-22 5.9 Medium2026-04-24
CVE-2026-6967 Missing Delegated Metadata Validation in awslabs/tough CWE-345 5.9 Medium2026-04-24
CVE-2026-6966 Signature Threshold Bypass in awslabs/tough Delegated Roles CWE-347 5.3 Medium2026-04-24
CVE-2025-2888 Improper timestamp caching during snapshot rollback in tough CWE-1025 3.7AILowAI2025-03-27
CVE-2025-2887 Failure to detect delegated target rollback in tough CWE-1025 5.3AIMediumAI2025-03-27
CVE-2025-2886 Terminating targets role delegations are not respected in tough CWE-670 4.3AIMediumAI2025-03-27
CVE-2025-2885 Root metadata version not validated in tough CWE-1288 6.5AIMediumAI2025-03-27
CVE-2021-41150 Improper sanitization of delegated role names in tough CWE-22 8.2 High2021-10-19
CVE-2021-41149 Improper sanitization of target names in tough CWE-22 8.2 High2021-10-19
CVE-2020-15093 Improper verification of signature threshold in tough CWE-347 8.6 High2020-07-09

All 10 known CVE vulnerabilities affecting tough with full Chinese analysis, references, and POCs where available.