Executive brief
gitverify has improper tag signature verification
Affected products
- Go github.com/supply-chain-tools/gitverify
Junglewise Threat Intelligence
Severity: medium · CVSS 4 · Published 2026-04-24
Technologies: github.com/supply-chain-tools/gitverify (Go). Vendors: Go.
gitverify has improper tag signature verification