Lucene search
+L

1 matches found

OSV
OSV
added 2025/04/04 4:06 p.m.24 views

GHSA-2FRX-2596-X5R6 gitoxide does not detect SHA-1 collision attacks

Summary gitoxide uses SHA-1 hash implementations without any collision detection, leaving it vulnerable to hash collision attacks. Details gitoxide uses the sha1smol or sha1 crate, both of which implement standard SHA-1 without any mitigations for collision attacks. This means that two distinct G...

6.8CVSS6.6AI score0.00239EPSS
SaveExploits0References5
Rows per page
Query Builder