GO-2024-3166: Incorrect delegation lookups can make go-tuf download the wrong artifact in github.com/theupdateframework/go-tuf
GO-2026-4348: Client DoS via malformed server response in github.com/theupdateframework/go-tuf
GO-2026-4349: Improper validattion of configured threshold for delegations in github.com/theupdateframework/go-tuf
GO-2026-4377: Path traversal in TAP 4 multirepo client allows arbitrary file write via repo names in github.com/theupdateframework/go-tuf