The client in tusdotnet through 2.5.0 relies on SHA-1 to prevent spoofing of file content.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-44150.json"