Skip to content
OpenAdvisories
Critical DSA-4657-1 1 CVE

git - security update

Published Apr 14, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 10 git 1:2.20.1-2+deb10u2
Debian · 9 git 1:2.11.0-3+deb9u6

Vulnerabilities 1

  • Critical 9.3
    CVE-2020-5260 Public exploit EPSS 15%

    malicious URLs may cause Git to present stored credentials to the wrong server

    Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. Git uses external "credential helper" programs to store and retrieve passwords or other credentials from secure stor…

    git git git git Debian Ubuntu Alpine