CVE-2026-128037

The gittuf tool versions 0.10.0 through 0.15.0 contains an incorrect authorization vulnerability (CWE-863). When a minimum threshold global rule and a policy rule protect the same namespace, the system incorrectly prioritizes the global rule's check over the policy rule's specific authorized user...