Skip to content
OpenAdvisories

Package · crates.io

jj-cli

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    GHSA-794x-2rpg-rfgr

    Jujutsu does not have SHA-1 collision detection

    ### Summary Jujutsu 0.28.0 and earlier rely on versions of gitoxide that use SHA-1 hash implementations without any collision detection, leaving them vulnerable to hash collision attacks. ### Details This is a result of the underlying [CVE-2025-31130 / GHSA-2…

    jj-lib jj-cli crates.io