Git Hash Chain Malleability

A paper demonstrates Git hash chain malleability, allowing an attacker to produce a second, distinct commit with an identical tree, metadata, and valid signature, differing only in its commit hash.