Executive brief
uniget CLI: Metadata signature verification only runs when UNIGET_IGNORE_METADATA_SIGNATURE is set
Affected products
- Go gitlab.com/uniget-org/cli
Junglewise Threat Intelligence
uniget CLI: Metadata signature verification only runs when UNIGET_IGNORE_METADATA_SIGNATURE is set
Severity: low · CVSS 3.1 · Published 2026-08-17
Technologies: gitlab.com/uniget-org/cli (Go). Vendors: Go.
Related threats
- uniget is a universal installer and updater for (container) tools. Prior to 0.27.6, the hooks edit command in cmd/uniget/hooks.go concatenat
- uniget is a universal installer and updater for (container) tools. Prior to 0.27.6, the hooks edit command in cmd/uniget/hooks.go parses UNI
- GO-2026-6246 - uniget CLI: Metadata signature verification only runs when UNIGET_IGNORE_METADATA_SIGNATURE is set in gitlab.com/uniget-org/cli
- uniget CLI metadata signature verification logic inversion
- uniget command injection in metadata check field