Recently, I got a chance to read git tag command.
We found a bug and confirmed which commit has introduced it,
but we could not point out which released versions are affected.
Apparently, git tag command supports
--contains argument.
This argument takes the commit hash.
git tag --contains 12AB34
It might show too many lines.
Then you can use --list (-l in short) argument
which allows you to filter the tags with pattern. For example,
git tag --contains 12AB34 --list 4.2.*