Skip to content
OpenAdvisories
Critical DLA-2177-1 1 CVE

git - security update

Published Apr 15, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 git 1:2.1.4-2.1+deb8u9

Vulnerabilities 1

  • Critical 9.3
    CVE-2020-5260 Public exploit EPSS 15%

    malicious URLs may cause Git to present stored credentials to the wrong server

    Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. Git uses external "credential helper" programs to store and retrieve passwords or other credentials from secure stor…

    git git git git Debian Ubuntu Alpine