Files
git/Documentation
Johannes Schindelin 4bf0d45e5d Merge branch 'disallow-ntlm-auth-by-default'
This topic branch addresses the following vulnerability:

- **CVE-2025-66413**:
  When a user clones a repository from an attacker-controlled server,
  Git may attempt NTLM authentication and disclose the user's NTLMv2 hash
  to the remote server. Since NTLM hashing is weak, the captured hash can
  potentially be brute-forced to recover the user's credentials. This is
  addressed by disabling NTLM authentication by default.
  (https://github.com/git-for-windows/git/security/advisories/GHSA-hv9c-4jm9-jh3x)

Signed-off-by: Johannes Schindelin <johannes.schindelin@gmx.de>
2026-02-13 11:34:13 +01:00
..
2025-11-17 07:35:33 -08:00
2025-03-01 10:26:15 -08:00
2025-08-28 11:28:57 -07:00
2025-10-02 12:26:12 -07:00
2025-06-17 10:44:38 -07:00
2025-02-14 17:53:47 -08:00
2025-10-24 13:48:04 -07:00