Skip to content
OpenAdvisories

Package · crates.io

sequoia-git

1 known vulnerabilities.

1 result · Feed

  • Low —

    sequoia-git has broken hard revocation handling

    Before `sq-git` checks if a commit can be authenticated, it first looks for hard revocations. Because parsing a policy is expensive and a project's policy rarely changes, `sq-git` has an optimization to only check a policy if it hasn't checked it before. It d…