TUF (aka The Update Framework) through 0.12.1 has Improper Verification of a Cryptographic Signature.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-6174.json"