{"action":"Upgrade jj-cli to 0.28.1 or later.","affected":[{"fixed":"0.28.1","introduced":"0"}],"component":"jj-cli","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.28.1"],"ghsa_id":"GHSA-794x-2rpg-rfgr","id":"tcs_01M5KEV4B9MTT0HXSWBGY7KZR8","modified_at":"2025-04-07T16:40:25Z","published_at":"2025-04-07T16:40:25Z","references":["https://osv.dev/vulnerability/GHSA-794x-2rpg-rfgr","https://github.com/jj-vcs/jj/security/advisories/GHSA-794x-2rpg-rfgr","https://github.com/jj-vcs/jj/commit/350da7d013773377aec0d3a4bf4374d3c941460e","https://github.com/jj-vcs/jj"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-794x-2rpg-rfgr#crates.io/jj-cli","url":"https://osv.dev/vulnerability/GHSA-794x-2rpg-rfgr"}],"summary":"Jujutsu does not have SHA-1 collision detection"}