3 ms·Malicious URLs cause Git (v2.26.0) to present stored credentials to wrong server29 points by vwpolo3 6y agovwpolo3 6y agoWithout upgrade, this might be exploited through package managers able to fetch from Git URLs (so NPM, Go Modules, and others).lilyball 6y agoXcode 11.4.1 came out today and it appears to contain the fix for this.