Skip to content

Product

crates.io gix-diff vulnerabilities

1 published CVE affecting crates.io gix-diff, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest crates.io gix-diff CVEs

Newest publication first

  1. CVE-2025-31130 gitoxide does not detect SHA-1 collision attacks

    Published
    MediumCVSS 6.8 EPSS 0.26%

    gitoxide is an implementation of git written in Rust. Before 0.42.0, gitoxide uses SHA-1 hash implementations without any collision detection, leaving it vulnerable to hash collision attacks. gitoxide uses the sha1_smol or sha1 crate, both of which implement standard SHA-1 withou...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.