Skip to content
OpenAdvisories

Package · Debian

gittuf

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.9
    CVE-2026-44544

    gittuf: Policy can be rolled back to prior valid version

    gittuf is a platform-agnostic Git security system. Prior to 0.14.0, an attacker with push access to gittuf's Reference State Log (RSL) can roll back the current policy to any previous policy trusted by the current set of root keys. gittuf determines the polic…

    gittuf gittuf gittuf github.com/gittuf/gittuf Debian Ubuntu Go