Radicle Patches Critical Replay Attack in Signed Reference System

A replay attack vulnerability in Radicle's signed references system compromises the cryptographic integrity guarantees developers depend on for distributed code verification. Attackers could exploit this flaw to reuse previously valid signatures and forge or manipulate commits without detection. The disclosure underscores the security risks in decentralized version control implementations where cryptographic flaws directly threaten repository authenticity.