MEDIUM6.8crates.ioGHSA-2frx-2596-x5r6· CVE-2025-31130, RUSTSEC-2025-0021gitoxide does not detect SHA-1 collision attacksModified: 9/10/2026