Junglewise Threat Intelligence

CVE-2025-31130: RUSTSEC-2025-0021 - SHA-1 collision attacks are not detected

CVE-2025-31130 · Severity: low · CVSS 3.1 · Published 2025-04-03

Technologies: gitoxide-core (crates.io), gix-worktree (crates.io), gix (crates.io), gix-worktree-state (crates.io), gitoxide (crates.io), gix-index (crates.io). Vendors: crates.io.

Executive brief

SHA-1 collision attacks are not detected

Affected products

  • crates.io gix-commitgraph
  • crates.io gix-config
  • crates.io gix-dir
  • crates.io gix-fsck
  • crates.io gix-revwalk
  • crates.io gitoxide-core
  • crates.io gix-odb
  • crates.io gix-traverse
  • crates.io gix-pack
  • crates.io gix-ref
  • crates.io gix-diff
  • crates.io gix-negotiate
  • crates.io gix-features
  • crates.io gix-filter
  • crates.io gix-archive
  • crates.io gix-worktree
  • crates.io gix-object
  • crates.io gix
  • crates.io gix-status
  • crates.io gix-worktree-state
  • crates.io gix-blame
  • crates.io gitoxide
  • crates.io gix-index
  • crates.io gix-merge
  • crates.io gix-discover
  • crates.io gix-revision
  • crates.io gix-protocol

Related threats