A vulnerability classified as critical was found in theupdateframework go-tuf up to 2.3.0. Affected is an unknown function of the component Repository/Mirror/Cache. Executing a manipulation can lead to reachable assertion.
This vulnerability is handled as CVE-2026-23991. The attack can be executed remotely. There is not any exploit available.
Upgrading the affected component is advised.
