Radicle: Disclosure of Vulnerability in the Network Protocol

Two critical security vulnerabilities were discovered in Radicle's network protocol affecting all released versions: unencrypted and unauthenticated network traffic allows attackers to read data in transit, and a broken peer authentication mechanism enables attackers to impersonate allow-listed Node IDs to access private repositories. Radicle recommends users stop using private repositories until a fix is released, which will require a major version bump due to backward incompatibility with the current protocol.