I noticed that supportutils is still using MD5 as a hash function in several places. Practical real-world collision attacks against MD5 have been known to the general public for more than 15 years now.
While this is not directly a vulnerability, given the scope of its use in supportutils, it still would be better to replace MD5 with a modern hash function such as SHA256 or better.
I noticed that
supportutilsis still using MD5 as a hash function in several places. Practical real-world collision attacks against MD5 have been known to the general public for more than 15 years now.While this is not directly a vulnerability, given the scope of its use in
supportutils, it still would be better to replace MD5 with a modern hash function such as SHA256 or better.