GHSA-X89H-7H96-V88F croc: Overwrite-confirmation bypass via a crafted "croc-stdin-" filename on receive

Summary croc is an end-to-end encrypted peer-to-peer file transfer tool. On the receiving side, the confirmation that normally protects an existing file from being overwritten or resumed is skipped whenever the received file's name starts with croc-stdin-, regardless of whether the incoming...