{"action":"Upgrade sequoia-git to 0.6.0 or later.","affected":[{"fixed":"0.6.0","introduced":"0.0.0-0"}],"component":"sequoia-git","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.6.0"],"ghsa_id":"GHSA-g27r-r6ph-vf5r","id":"tcs_01M5KFBAAZFN70GPHGV6R96JP1","modified_at":"2026-05-06T06:32:50Z","published_at":"2026-04-21T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2026-0109","https://crates.io/crates/sequoia-git","https://rustsec.org/advisories/RUSTSEC-2026-0109.html","https://gitlab.com/sequoia-pgp/sequoia-git/-/commit/f9c9074bd80023456221f09c3c4ff19957ee9c58"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2026-0109","url":"https://osv.dev/vulnerability/RUSTSEC-2026-0109"}],"summary":"Broken hard revocation handling"}