Skip to content
OpenAdvisories
Medium DLA-2182-1 1 CVE

git - security update

Published Apr 23, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 git 1:2.1.4-2.1+deb8u10

Vulnerabilities 1

  • Medium 4.0
    CVE-2020-11008

    Malicious URLs can still cause Git to send a stored credential to the wrong server

    Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. This bug is similar to CVE-2020-5260(GHSA-qm7j-c969-7j4q). The fix for that bug still left the door open for an expl…

    git git git git Debian Ubuntu Alpine