CVE-2020-111008

The connected advisories confirm CVE-2020-111008 affects Git via the credential helper flow. Malicious URLs with a newline, empty host, or missing a scheme could cause Git to reveal credentials for an unintended host; the issue arises from under-specified credential patterns. The MGASA-2020-0181 ...