GHSA-H829-5CG7-6HFF: GHSA-H829-5CG7-6HFF: Improper Tag Signature Verification in Gitverify

GHSA-H829-5CG7-6HFF: Improper Tag Signature Verification in Gitverify Vulnerability ID: GHSA-H829-5CG7-6HFF CVSS Score: 5.3 Published: 2026-04-24 The gitverify tool contains a logic inversion vulnerability in its signature verification routines. This flaw allows unsigned annotated Git tags to bypass security policies intended to enforce cryptographic signatures. TL;DR A logic inversion in gitverify allows unsigned annotated Git tags to bypass security policies. Attackers can inject unsigned refe