[tmstieff]

SHA-1 collisions have been proven as an attack vector for a few years now.

https://security.googleblog.com/2017/02/announcing-first-sha...

[Sebb767]

And, as the parent correctly pointed out, that would be a preimage attack, which is far harder.