Skip to content
OpenAdvisories

Package · crates.io

gix-commitgraph

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2025-31130

    gitoxide does not detect SHA-1 collision attacks

    gitoxide is an implementation of git written in Rust. Before 0.42.0, gitoxide uses SHA-1 hash implementations without any collision detection, leaving it vulnerable to hash collision attacks. gitoxide uses the sha1_smol or sha1 crate, both of which implement …

    GitoxideLabs gitoxide gix gitoxide Debian Ubuntu crates.io