> This vulnerability affects users working on multi-user machines where a malicious actor could create a .git directory in a shared location above a victim’s cu

> This vulnerability affects users working on multi-user machines where a malicious actor could create a .git directory in a shared location above a victim’s current working directory. On Windows, for example, an attacker could create C:\.git\config, which would cause all git invocations that occur outside of a repository to read its configured values. lol. “vulnerability” Neither of these were worth an announcement blog post.