CVE-2020-11008 Malicious URLs can still cause Git to send a stored credential to the wrong server

[
  {
    "product": "git",
    "vendor": "git",
    "versions": [
      {
        "status": "affected",
        "version": "< 2.17.5"
      },
      {
        "status": "affected",
        "version": ">= 2.18.0, < 2.18.4"
      },
      {
        "status": "affected",
        "version": ">= 2.19.0, 2.19.5"
      },
      {
        "status": "affected",
        "version": ">= 2.20.0, < 2.20.4"
      },
      {
        "status": "affected",
        "version": ">= 2.21.0, < 2.21.3"
      },
      {
        "status": "affected",
        "version": ">= 2.22.0, < 2.22.4"
      },
      {
        "status": "affected",
        "version": ">= 2.23.0, < 2.23.3"
      },
      {
        "status": "affected",
        "version": ">= 2.24.0, < 2.24.3"
      },
      {
        "status": "affected",
        "version": ">= 2.25.0, < 2.25.4"
      },
      {
        "status": "affected",
        "version": ">= 2.26.0, < 2.26.2"
      }
    ]
  }
]