Files
git/Documentation/config
Johannes Schindelin 273122107a Merge branch 'disallow-ntlm-auth-by-default'
This topic branch addresses the following vulnerability:

- **CVE-2025-66413**:
  When a user clones a repository from an attacker-controlled server,
  Git may attempt NTLM authentication and disclose the user's NTLMv2 hash
  to the remote server. Since NTLM hashing is weak, the captured hash can
  potentially be brute-forced to recover the user's credentials. This is
  addressed by disabling NTLM authentication by default.
  (https://github.com/git-for-windows/git/security/advisories/GHSA-hv9c-4jm9-jh3x)

Signed-off-by: Johannes Schindelin <johannes.schindelin@gmx.de>
2026-04-08 22:03:45 +02:00
..
2026-02-17 13:30:41 -08:00
2025-02-14 17:53:47 -08:00
2026-03-04 10:52:59 -08:00
2025-12-09 07:38:56 +09:00
2025-02-14 17:53:47 -08:00
2025-08-08 09:14:46 -07:00
2025-02-14 17:53:47 -08:00
2025-10-20 14:12:17 -07:00