A vulnerability in Git that leads to credential leaks.
Corrective releases for the distributed version control system Git 2.26.1, 2.25.3, 2.24.2, 2.23.2, 2.22.3, 2.21.2, 2.20.3, 2.19.4, 2.18.3, and 2.17.4 have been published, addressing a vulnerability (CVE-2020-5260) in the 'credential.helper' handler that causes credentials to be sent to the wrong host when the git client interacts with a repository via a specially formatted URL containing a newline character. This vulnerability can be exploited to organize […]
