Threats tagged 'brew-git-cve-2024-52006'

A vulnerability in Git's credential helper protocol allows credential exfiltration due to newline confusion caused by certain ecosystems interpreting carriage return characters as newlines. This issue affects Git versions from 1.7.9 up to but not including 2.48.1. The vulnerability has been fixed in Git version 2.48.1 and several other patch releases. Users are advised to upgrade to a fixed version or avoid cloning from untrusted URLs, especially recursive clones.