Executive brief
uniget CLI: Metadata signature verification only runs when UNIGET_IGNORE_METADATA_SIGNATURE is set in gitlab.com/uniget-org/cli
Affected products
- Go gitlab.com/uniget-org/cli
Junglewise Threat Intelligence
GO-2026-6246 - uniget CLI: Metadata signature verification only runs when UNIGET_IGNORE_METADATA_SIGNATURE is set in gitlab.com/uniget-org/cli
Severity: info · Published 2026-08-18
Technologies: gitlab.com/uniget-org/cli (Go). Vendors: Go.
Related threats
- uniget is a universal installer and updater for (container) tools. Prior to 0.27.6, the hooks edit command in cmd/uniget/hooks.go concatenat
- uniget is a universal installer and updater for (container) tools. Prior to 0.27.6, the hooks edit command in cmd/uniget/hooks.go parses UNI
- uniget CLI: Metadata signature verification only runs when UNIGET_IGNORE_METADATA_SIGNATURE is set
- uniget CLI metadata signature verification logic inversion
- uniget command injection in metadata check field