gitsign vulnerabilities (Ubuntu)

2 vulnerabilities.

• gitsign Ubuntu gitsign verify accepts signatures over go-git-normalized bytes, enabling trust confusion on malformed commits CVE-2026-44309 Fix available 5.3 MediumMay 8, 2026
• gitsign Ubuntu gitsign --verify panics on empty-certificate PKCS7 and exits 0, bypassing exit-code callers CVE-2026-44310 Fix available 5.4 MediumMay 8, 2026