Advisories for Cargo/Gix-Pack package

Multiple denial-of-service vectors in gix-pack: unchecked array indexing causes panics on crafted delta data, and uncapped attacker-controlled size headers enable OOM process kills. Both are triggered by malicious pack data received during clone/fetch.

gitoxide uses SHA-1 hash implementations without any collision detection, leaving it vulnerable to hash collision attacks.