AWS tough

• CVE-2026-6968 Medium 5.9 Multiple Path Traversal Variants in awslabs/tough 0.5%
• CVE-2026-6967 Medium 5.9 Missing Delegated Metadata Validation in awslabs/tough 0.3%
• CVE-2026-6966 Medium 5.3 Signature Threshold Bypass in awslabs/tough Delegated Roles 0.3%
• CVE-2025-2888 Medium 5.7 Improper timestamp caching during snapshot rollback in tough 0.3%
• CVE-2025-2887 Medium 5.7 Failure to detect delegated target rollback in tough 0.3%
• CVE-2025-2886 Medium 5.7 Terminating targets role delegations are not respected in tough 0.3%
• CVE-2025-2885 Medium 5.7 Root metadata version not validated in tough 0.3%