This report details a fuzzing audit commissioned by the CNCF and the engagement is part of the broader efforts carried out by CNCF in securing the software in the CNCF landscape. Demonstrating and ensuring the security of these software packages is vital for the CNCF.

This report documents the findings of a security assessment targeting the TUF/Notary software compound. The project, which comprised a source code audit and a classic penetration test, was carried out by Cure53 in 2018 and yielded only four securityrelevant findings.

This report documents the findings of a security assessment targeting the TUF/Notary software compound. The project, which comprised a source code audit and a classic penetration test, was carried out by Cure53 in 2018 and yielded only four securityrelevant findings.