CVE-2021-44150: Use of a Broken or Risky Cryptographic Algorithm

November 22, 2021 (updated August 8, 2023)

The client in tusdotnet relies on SHA-1 to prevent spoofing of file content.

References

github.com/tusdotnet/tusdotnet/issues/157
nvd.nist.gov/vuln/detail/CVE-2021-44150

Code Behaviors & Features

Detect and mitigate CVE-2021-44150 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →