Hacker News new | ask | show | jobs
Malicious URLs cause Git (v2.26.0) to present stored credentials to wrong server (github.com)
29 points by vwpolo3 2252 days ago
2 comments
vwpolo3 2252 days ago
Without upgrade, this might be exploited through package managers able to fetch from Git URLs (so NPM, Go Modules, and others).
link
lilyball 2251 days ago
Xcode 11.4.1 came out today and it appears to contain the fix for this.
link