The vulnerability of the Next.js software platform for creating web applications stems from the use of an algorithm that does not meet security requirements for hash functions. This allows attackers to compromise the integrity of the protected information.

The vulnerability of the Next.js web application development software platform is related to the use of an algorithm that does not meet security requirements for hash functions. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

RUSTSEC-2025-0021 SHA-1 collision attacks are not detected

Summary gitoxide uses SHA-1 hash implementations without any collision detection, leaving it vulnerable to hash collision attacks. Details gitoxide uses the sha1smol or sha1 crate, both of which implement standard SHA-1 without any mitigations for collision attacks. This means that two distinct G...