diff --git a/crates/gix-features/RUSTSEC-2025-0021.md b/crates/gix-features/RUSTSEC-2025-0021.md
index be7a0c879..4716e6853 100644
--- a/crates/gix-features/RUSTSEC-2025-0021.md
+++ b/crates/gix-features/RUSTSEC-2025-0021.md
@@ -4,6 +4,10 @@ id = "RUSTSEC-2025-0021"
 package = "gix-features"
 date = "2025-04-03"
 url = "https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-2frx-2596-x5r6"
+references = [
+    "https://github.com/advisories/GHSA-2frx-2596-x5r6",
+    "https://nvd.nist.gov/vuln/detail/CVE-2025-31130",
+]
 categories = ["crypto-failure"]
 cvss = "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N"
 keywords = ["hash-collision", "sha-1", "weak-hash"]