CVE-2025-31130
28 advisories.
crates.io/gix-features CVE-2025-31130: medium 6.8, EPSS 0.26%
gitoxide does not detect SHA-1 collision attacks
Action: Upgrade gix-features to 0.41.0 or later.
cargo update -p gix-features --precise 0.41.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.41.0 | - |
Fixed versions
| 0.41.0 |
Sources
- osv: GHSA-2frx-2596-x5r6
- https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-2frx-2596-x5r6
- https://nvd.nist.gov/vuln/detail/CVE-2025-31130
- https://github.com/GitoxideLabs/gitoxide/commit/f253f02a6658b3b7612a50d56c71f5ae4da4ca21
- https://github.com/GitoxideLabs/gitoxide
- https://rustsec.org/advisories/RUSTSEC-2025-0021.html
CVE-2025-31130 · published · modified · JSON
crates.io/gix-commitgraph CVE-2025-31130: medium 6.8, EPSS 0.26%
gitoxide does not detect SHA-1 collision attacks
Action: Upgrade gix-commitgraph to 0.27.0 or later.
cargo update -p gix-commitgraph --precise 0.27.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.27.0 | - |
Fixed versions
| 0.27.0 |
Sources
- osv: GHSA-2frx-2596-x5r6#crates.io/gix-commitgraph
- https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-2frx-2596-x5r6
- https://nvd.nist.gov/vuln/detail/CVE-2025-31130
- https://github.com/GitoxideLabs/gitoxide/commit/f253f02a6658b3b7612a50d56c71f5ae4da4ca21
- https://github.com/GitoxideLabs/gitoxide
- https://rustsec.org/advisories/RUSTSEC-2025-0021.html
CVE-2025-31130 · published · modified · JSON
crates.io/gix-index CVE-2025-31130: medium 6.8, EPSS 0.26%
gitoxide does not detect SHA-1 collision attacks
Action: Upgrade gix-index to 0.39.0 or later.
cargo update -p gix-index --precise 0.39.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.39.0 | - |
Fixed versions
| 0.39.0 |
Sources
- osv: GHSA-2frx-2596-x5r6#crates.io/gix-index
- https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-2frx-2596-x5r6
- https://nvd.nist.gov/vuln/detail/CVE-2025-31130
- https://github.com/GitoxideLabs/gitoxide/commit/f253f02a6658b3b7612a50d56c71f5ae4da4ca21
- https://github.com/GitoxideLabs/gitoxide
- https://rustsec.org/advisories/RUSTSEC-2025-0021.html
CVE-2025-31130 · published · modified · JSON
crates.io/gix-object CVE-2025-31130: medium 6.8, EPSS 0.26%
gitoxide does not detect SHA-1 collision attacks
Action: Upgrade gix-object to 0.48.0 or later.
cargo update -p gix-object --precise 0.48.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.48.0 | - |
Fixed versions
| 0.48.0 |
Sources
- osv: GHSA-2frx-2596-x5r6#crates.io/gix-object
- https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-2frx-2596-x5r6
- https://nvd.nist.gov/vuln/detail/CVE-2025-31130
- https://github.com/GitoxideLabs/gitoxide/commit/f253f02a6658b3b7612a50d56c71f5ae4da4ca21
- https://github.com/GitoxideLabs/gitoxide
- https://rustsec.org/advisories/RUSTSEC-2025-0021.html
CVE-2025-31130 · published · modified · JSON
crates.io/gix-odb CVE-2025-31130: medium 6.8, EPSS 0.26%
gitoxide does not detect SHA-1 collision attacks
Action: Upgrade gix-odb to 0.68.0 or later.
cargo update -p gix-odb --precise 0.68.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.68.0 | - |
Fixed versions
| 0.68.0 |
Sources
- osv: GHSA-2frx-2596-x5r6#crates.io/gix-odb
- https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-2frx-2596-x5r6
- https://nvd.nist.gov/vuln/detail/CVE-2025-31130
- https://github.com/GitoxideLabs/gitoxide/commit/f253f02a6658b3b7612a50d56c71f5ae4da4ca21
- https://github.com/GitoxideLabs/gitoxide
- https://rustsec.org/advisories/RUSTSEC-2025-0021.html
CVE-2025-31130 · published · modified · JSON
crates.io/gix-pack CVE-2025-31130: medium 6.8, EPSS 0.26%
gitoxide does not detect SHA-1 collision attacks
Action: Upgrade gix-pack to 0.58.0 or later.
cargo update -p gix-pack --precise 0.58.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.58.0 | - |
Fixed versions
| 0.58.0 |
Sources
- osv: GHSA-2frx-2596-x5r6#crates.io/gix-pack
- https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-2frx-2596-x5r6
- https://nvd.nist.gov/vuln/detail/CVE-2025-31130
- https://github.com/GitoxideLabs/gitoxide/commit/f253f02a6658b3b7612a50d56c71f5ae4da4ca21
- https://github.com/GitoxideLabs/gitoxide
- https://rustsec.org/advisories/RUSTSEC-2025-0021.html
CVE-2025-31130 · published · modified · JSON
crates.io/gitoxide CVE-2025-31130: medium 6.8, EPSS 0.26%
gitoxide does not detect SHA-1 collision attacks
Action: Upgrade gitoxide to 0.42.0 or later.
cargo update -p gitoxide --precise 0.42.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.42.0 | - |
Fixed versions
| 0.42.0 |
Sources
- osv: GHSA-2frx-2596-x5r6#crates.io/gitoxide
- https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-2frx-2596-x5r6
- https://nvd.nist.gov/vuln/detail/CVE-2025-31130
- https://github.com/GitoxideLabs/gitoxide/commit/f253f02a6658b3b7612a50d56c71f5ae4da4ca21
- https://github.com/GitoxideLabs/gitoxide
- https://rustsec.org/advisories/RUSTSEC-2025-0021.html
CVE-2025-31130 · published · modified · JSON
crates.io/gitoxide-core CVE-2025-31130: medium 6.8, EPSS 0.26%
gitoxide does not detect SHA-1 collision attacks
Action: Upgrade gitoxide-core to 0.46.0 or later.
cargo update -p gitoxide-core --precise 0.46.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.46.0 | - |
Fixed versions
| 0.46.0 |
Sources
- osv: GHSA-2frx-2596-x5r6#crates.io/gitoxide-core
- https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-2frx-2596-x5r6
- https://nvd.nist.gov/vuln/detail/CVE-2025-31130
- https://github.com/GitoxideLabs/gitoxide/commit/f253f02a6658b3b7612a50d56c71f5ae4da4ca21
- https://github.com/GitoxideLabs/gitoxide
- https://rustsec.org/advisories/RUSTSEC-2025-0021.html
CVE-2025-31130 · published · modified · JSON
crates.io/gix CVE-2025-31130: medium 6.8, EPSS 0.26%
gitoxide does not detect SHA-1 collision attacks
Action: Upgrade gix to 0.71.0 or later.
cargo update -p gix --precise 0.71.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.71.0 | - |
Fixed versions
| 0.71.0 |
Sources
- osv: GHSA-2frx-2596-x5r6#crates.io/gix
- https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-2frx-2596-x5r6
- https://nvd.nist.gov/vuln/detail/CVE-2025-31130
- https://github.com/GitoxideLabs/gitoxide/commit/f253f02a6658b3b7612a50d56c71f5ae4da4ca21
- https://github.com/GitoxideLabs/gitoxide
- https://rustsec.org/advisories/RUSTSEC-2025-0021.html
CVE-2025-31130 · published · modified · JSON
crates.io/gix-archive CVE-2025-31130: medium 6.8, EPSS 0.26%
gitoxide does not detect SHA-1 collision attacks
Action: Upgrade gix-archive to 0.20.0 or later.
cargo update -p gix-archive --precise 0.20.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.20.0 | - |
Fixed versions
| 0.20.0 |
Sources
- osv: GHSA-2frx-2596-x5r6#crates.io/gix-archive
- https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-2frx-2596-x5r6
- https://nvd.nist.gov/vuln/detail/CVE-2025-31130
- https://github.com/GitoxideLabs/gitoxide/commit/f253f02a6658b3b7612a50d56c71f5ae4da4ca21
- https://github.com/GitoxideLabs/gitoxide
- https://rustsec.org/advisories/RUSTSEC-2025-0021.html
CVE-2025-31130 · published · modified · JSON
crates.io/gix-blame CVE-2025-31130: medium 6.8, EPSS 0.26%
gitoxide does not detect SHA-1 collision attacks
Action: Upgrade gix-blame to 0.1.0 or later.
cargo update -p gix-blame --precise 0.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.0 | - |
Fixed versions
| 0.1.0 |
Sources
- osv: GHSA-2frx-2596-x5r6#crates.io/gix-blame
- https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-2frx-2596-x5r6
- https://nvd.nist.gov/vuln/detail/CVE-2025-31130
- https://github.com/GitoxideLabs/gitoxide/commit/f253f02a6658b3b7612a50d56c71f5ae4da4ca21
- https://github.com/GitoxideLabs/gitoxide
- https://rustsec.org/advisories/RUSTSEC-2025-0021.html
CVE-2025-31130 · published · modified · JSON
crates.io/gix-config CVE-2025-31130: medium 6.8, EPSS 0.26%
gitoxide does not detect SHA-1 collision attacks
Action: Upgrade gix-config to 0.44.0 or later.
cargo update -p gix-config --precise 0.44.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.44.0 | - |
Fixed versions
| 0.44.0 |
Sources
- osv: GHSA-2frx-2596-x5r6#crates.io/gix-config
- https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-2frx-2596-x5r6
- https://nvd.nist.gov/vuln/detail/CVE-2025-31130
- https://github.com/GitoxideLabs/gitoxide/commit/f253f02a6658b3b7612a50d56c71f5ae4da4ca21
- https://github.com/GitoxideLabs/gitoxide
- https://rustsec.org/advisories/RUSTSEC-2025-0021.html
CVE-2025-31130 · published · modified · JSON
crates.io/gix-diff CVE-2025-31130: medium 6.8, EPSS 0.26%
gitoxide does not detect SHA-1 collision attacks
Action: Upgrade gix-diff to 0.51.0 or later.
cargo update -p gix-diff --precise 0.51.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.51.0 | - |
Fixed versions
| 0.51.0 |
Sources
- osv: GHSA-2frx-2596-x5r6#crates.io/gix-diff
- https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-2frx-2596-x5r6
- https://nvd.nist.gov/vuln/detail/CVE-2025-31130
- https://github.com/GitoxideLabs/gitoxide/commit/f253f02a6658b3b7612a50d56c71f5ae4da4ca21
- https://github.com/GitoxideLabs/gitoxide
- https://rustsec.org/advisories/RUSTSEC-2025-0021.html
CVE-2025-31130 · published · modified · JSON
crates.io/gix-dir CVE-2025-31130: medium 6.8, EPSS 0.26%
gitoxide does not detect SHA-1 collision attacks
Action: Upgrade gix-dir to 0.13.0 or later.
cargo update -p gix-dir --precise 0.13.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.13.0 | - |
Fixed versions
| 0.13.0 |
Sources
- osv: GHSA-2frx-2596-x5r6#crates.io/gix-dir
- https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-2frx-2596-x5r6
- https://nvd.nist.gov/vuln/detail/CVE-2025-31130
- https://github.com/GitoxideLabs/gitoxide/commit/f253f02a6658b3b7612a50d56c71f5ae4da4ca21
- https://github.com/GitoxideLabs/gitoxide
- https://rustsec.org/advisories/RUSTSEC-2025-0021.html
CVE-2025-31130 · published · modified · JSON
crates.io/gix-discover CVE-2025-31130: medium 6.8, EPSS 0.26%
gitoxide does not detect SHA-1 collision attacks
Action: Upgrade gix-discover to 0.39.0 or later.
cargo update -p gix-discover --precise 0.39.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.39.0 | - |
Fixed versions
| 0.39.0 |
Sources
- osv: GHSA-2frx-2596-x5r6#crates.io/gix-discover
- https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-2frx-2596-x5r6
- https://nvd.nist.gov/vuln/detail/CVE-2025-31130
- https://github.com/GitoxideLabs/gitoxide/commit/f253f02a6658b3b7612a50d56c71f5ae4da4ca21
- https://github.com/GitoxideLabs/gitoxide
- https://rustsec.org/advisories/RUSTSEC-2025-0021.html
CVE-2025-31130 · published · modified · JSON
crates.io/gix-filter CVE-2025-31130: medium 6.8, EPSS 0.26%
gitoxide does not detect SHA-1 collision attacks
Action: Upgrade gix-filter to 0.18.0 or later.
cargo update -p gix-filter --precise 0.18.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.18.0 | - |
Fixed versions
| 0.18.0 |
Sources
- osv: GHSA-2frx-2596-x5r6#crates.io/gix-filter
- https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-2frx-2596-x5r6
- https://nvd.nist.gov/vuln/detail/CVE-2025-31130
- https://github.com/GitoxideLabs/gitoxide/commit/f253f02a6658b3b7612a50d56c71f5ae4da4ca21
- https://github.com/GitoxideLabs/gitoxide
- https://rustsec.org/advisories/RUSTSEC-2025-0021.html
CVE-2025-31130 · published · modified · JSON
crates.io/gix-fsck CVE-2025-31130: medium 6.8, EPSS 0.26%
gitoxide does not detect SHA-1 collision attacks
Action: Upgrade gix-fsck to 0.10.0 or later.
cargo update -p gix-fsck --precise 0.10.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.10.0 | - |
Fixed versions
| 0.10.0 |
Sources
- osv: GHSA-2frx-2596-x5r6#crates.io/gix-fsck
- https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-2frx-2596-x5r6
- https://nvd.nist.gov/vuln/detail/CVE-2025-31130
- https://github.com/GitoxideLabs/gitoxide/commit/f253f02a6658b3b7612a50d56c71f5ae4da4ca21
- https://github.com/GitoxideLabs/gitoxide
- https://rustsec.org/advisories/RUSTSEC-2025-0021.html
CVE-2025-31130 · published · modified · JSON
crates.io/gix-merge CVE-2025-31130: medium 6.8, EPSS 0.26%
gitoxide does not detect SHA-1 collision attacks
Action: Upgrade gix-merge to 0.4.0 or later.
cargo update -p gix-merge --precise 0.4.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.0 | - |
Fixed versions
| 0.4.0 |
Sources
- osv: GHSA-2frx-2596-x5r6#crates.io/gix-merge
- https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-2frx-2596-x5r6
- https://nvd.nist.gov/vuln/detail/CVE-2025-31130
- https://github.com/GitoxideLabs/gitoxide/commit/f253f02a6658b3b7612a50d56c71f5ae4da4ca21
- https://github.com/GitoxideLabs/gitoxide
- https://rustsec.org/advisories/RUSTSEC-2025-0021.html
CVE-2025-31130 · published · modified · JSON
crates.io/gix-negotiate CVE-2025-31130: medium 6.8, EPSS 0.26%
gitoxide does not detect SHA-1 collision attacks
Action: Upgrade gix-negotiate to 0.19.0 or later.
cargo update -p gix-negotiate --precise 0.19.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.19.0 | - |
Fixed versions
| 0.19.0 |
Sources
- osv: GHSA-2frx-2596-x5r6#crates.io/gix-negotiate
- https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-2frx-2596-x5r6
- https://nvd.nist.gov/vuln/detail/CVE-2025-31130
- https://github.com/GitoxideLabs/gitoxide/commit/f253f02a6658b3b7612a50d56c71f5ae4da4ca21
- https://github.com/GitoxideLabs/gitoxide
- https://rustsec.org/advisories/RUSTSEC-2025-0021.html
CVE-2025-31130 · published · modified · JSON
crates.io/gix-protocol CVE-2025-31130: medium 6.8, EPSS 0.26%
gitoxide does not detect SHA-1 collision attacks
Action: Upgrade gix-protocol to 0.49.0 or later.
cargo update -p gix-protocol --precise 0.49.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.49.0 | - |
Fixed versions
| 0.49.0 |
Sources
- osv: GHSA-2frx-2596-x5r6#crates.io/gix-protocol
- https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-2frx-2596-x5r6
- https://nvd.nist.gov/vuln/detail/CVE-2025-31130
- https://github.com/GitoxideLabs/gitoxide/commit/f253f02a6658b3b7612a50d56c71f5ae4da4ca21
- https://github.com/GitoxideLabs/gitoxide
- https://rustsec.org/advisories/RUSTSEC-2025-0021.html
CVE-2025-31130 · published · modified · JSON
crates.io/gix-ref CVE-2025-31130: medium 6.8, EPSS 0.26%
gitoxide does not detect SHA-1 collision attacks
Action: Upgrade gix-ref to 0.51.0 or later.
cargo update -p gix-ref --precise 0.51.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.51.0 | - |
Fixed versions
| 0.51.0 |
Sources
- osv: GHSA-2frx-2596-x5r6#crates.io/gix-ref
- https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-2frx-2596-x5r6
- https://nvd.nist.gov/vuln/detail/CVE-2025-31130
- https://github.com/GitoxideLabs/gitoxide/commit/f253f02a6658b3b7612a50d56c71f5ae4da4ca21
- https://github.com/GitoxideLabs/gitoxide
- https://rustsec.org/advisories/RUSTSEC-2025-0021.html
CVE-2025-31130 · published · modified · JSON
crates.io/gix-revision CVE-2025-31130: medium 6.8, EPSS 0.26%
gitoxide does not detect SHA-1 collision attacks
Action: Upgrade gix-revision to 0.33.0 or later.
cargo update -p gix-revision --precise 0.33.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.33.0 | - |
Fixed versions
| 0.33.0 |
Sources
- osv: GHSA-2frx-2596-x5r6#crates.io/gix-revision
- https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-2frx-2596-x5r6
- https://nvd.nist.gov/vuln/detail/CVE-2025-31130
- https://github.com/GitoxideLabs/gitoxide/commit/f253f02a6658b3b7612a50d56c71f5ae4da4ca21
- https://github.com/GitoxideLabs/gitoxide
- https://rustsec.org/advisories/RUSTSEC-2025-0021.html
CVE-2025-31130 · published · modified · JSON
crates.io/gix-revwalk CVE-2025-31130: medium 6.8, EPSS 0.26%
gitoxide does not detect SHA-1 collision attacks
Action: Upgrade gix-revwalk to 0.19.0 or later.
cargo update -p gix-revwalk --precise 0.19.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.19.0 | - |
Fixed versions
| 0.19.0 |
Sources
- osv: GHSA-2frx-2596-x5r6#crates.io/gix-revwalk
- https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-2frx-2596-x5r6
- https://nvd.nist.gov/vuln/detail/CVE-2025-31130
- https://github.com/GitoxideLabs/gitoxide/commit/f253f02a6658b3b7612a50d56c71f5ae4da4ca21
- https://github.com/GitoxideLabs/gitoxide
- https://rustsec.org/advisories/RUSTSEC-2025-0021.html
CVE-2025-31130 · published · modified · JSON
crates.io/gix-status CVE-2025-31130: medium 6.8, EPSS 0.26%
gitoxide does not detect SHA-1 collision attacks
Action: Upgrade gix-status to 0.18.0 or later.
cargo update -p gix-status --precise 0.18.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.18.0 | - |
Fixed versions
| 0.18.0 |
Sources
- osv: GHSA-2frx-2596-x5r6#crates.io/gix-status
- https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-2frx-2596-x5r6
- https://nvd.nist.gov/vuln/detail/CVE-2025-31130
- https://github.com/GitoxideLabs/gitoxide/commit/f253f02a6658b3b7612a50d56c71f5ae4da4ca21
- https://github.com/GitoxideLabs/gitoxide
- https://rustsec.org/advisories/RUSTSEC-2025-0021.html
CVE-2025-31130 · published · modified · JSON
crates.io/gix-traverse CVE-2025-31130: medium 6.8, EPSS 0.26%
gitoxide does not detect SHA-1 collision attacks
Action: Upgrade gix-traverse to 0.45.0 or later.
cargo update -p gix-traverse --precise 0.45.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.45.0 | - |
Fixed versions
| 0.45.0 |
Sources
- osv: GHSA-2frx-2596-x5r6#crates.io/gix-traverse
- https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-2frx-2596-x5r6
- https://nvd.nist.gov/vuln/detail/CVE-2025-31130
- https://github.com/GitoxideLabs/gitoxide/commit/f253f02a6658b3b7612a50d56c71f5ae4da4ca21
- https://github.com/GitoxideLabs/gitoxide
- https://rustsec.org/advisories/RUSTSEC-2025-0021.html
CVE-2025-31130 · published · modified · JSON
crates.io/gix-worktree CVE-2025-31130: medium 6.8, EPSS 0.26%
gitoxide does not detect SHA-1 collision attacks
Action: Upgrade gix-worktree to 0.40.0 or later.
cargo update -p gix-worktree --precise 0.40.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.40.0 | - |
Fixed versions
| 0.40.0 |
Sources
- osv: GHSA-2frx-2596-x5r6#crates.io/gix-worktree
- https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-2frx-2596-x5r6
- https://nvd.nist.gov/vuln/detail/CVE-2025-31130
- https://github.com/GitoxideLabs/gitoxide/commit/f253f02a6658b3b7612a50d56c71f5ae4da4ca21
- https://github.com/GitoxideLabs/gitoxide
- https://rustsec.org/advisories/RUSTSEC-2025-0021.html
CVE-2025-31130 · published · modified · JSON
crates.io/gix-worktree-state CVE-2025-31130: medium 6.8, EPSS 0.26%
gitoxide does not detect SHA-1 collision attacks
Action: Upgrade gix-worktree-state to 0.18.0 or later.
cargo update -p gix-worktree-state --precise 0.18.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.18.0 | - |
Fixed versions
| 0.18.0 |
Sources
- osv: GHSA-2frx-2596-x5r6#crates.io/gix-worktree-state
- https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-2frx-2596-x5r6
- https://nvd.nist.gov/vuln/detail/CVE-2025-31130
- https://github.com/GitoxideLabs/gitoxide/commit/f253f02a6658b3b7612a50d56c71f5ae4da4ca21
- https://github.com/GitoxideLabs/gitoxide
- https://rustsec.org/advisories/RUSTSEC-2025-0021.html
CVE-2025-31130 · published · modified · JSON
crates.io/gix-features CVE-2025-31130: medium 6.8, EPSS 0.26%
SHA-1 collision attacks are not detected
Action: Upgrade gix-features to 0.41.0 or later.
cargo update -p gix-features --precise 0.41.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-0 | 0.41.0 | - |
Fixed versions
| 0.41.0 |
Sources
- osv: RUSTSEC-2025-0021
- https://crates.io/crates/gix-features
- https://rustsec.org/advisories/RUSTSEC-2025-0021.html
- https://github.com/GitoxideLabs/gitoxide/commit/f253f02a6658b3b7612a50d56c71f5ae4da4ca21
- https://github.com/advisories/GHSA-2frx-2596-x5r6
- https://nvd.nist.gov/vuln/detail/CVE-2025-31130
CVE-2025-31130 · published · modified · JSON