CVE-2016-9757

CVE-2016-9757 affects Rapid7 Nexpose 6.4.12 UI, where an authenticated user with tag-creation rights can inject cross-site scripting into the tag name field. When another authenticated user views the tag in the Tag Detail page, the script executes in their browser context. Public references indic...

Cannot sign commits and tags for Git Flow

The Git Flow actions do not have an option to sign off commits and tags. Unlike a commit or tag created manually, there is no Sign tag option. See attachment for reference to Add Tag feature that has the Sign tag option...