gix-ref vulnerabilities (crates.io)

2 vulnerabilities.

• gix-ref crates.io gitoxide does not detect SHA-1 collision attacks CVE-2025-31130 Fix available 6.8 MediumApril 3, 2025
• gix-ref crates.io gix refs and paths with reserved Windows device names access the devices CVE-2024-35197 Fix available 5.4 MediumMay 22, 2024