Malicious URLs cause Git (v2.26.0) to present stored credentials to wrong server | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		Malicious URLs cause Git (v2.26.0) to present stored credentials to wrong server (github.com/git)
		29 points by vwpolo3 on April 15, 2020 \| hide \| past \| favorite \| 2 comments

vwpolo3 on April 15, 2020 | [–]

Without upgrade, this might be exploited through package managers able to fetch from Git URLs (so NPM, Go Modules, and others).

lilyball on April 15, 2020 | [–]

Xcode 11.4.1 came out today and it appears to contain the fix for this.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact