Input Validation and Logic

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. Git allows arbitrary code execution through broken config quotingCVE-2025-48384git · CVSS 8.1 · 4.5% likely

   CWE-436

2. The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restr…CVE-2015-7545Git Project · 19% likely

   CWE-20

3. malicious URLs may cause Git to present stored credentials to the wrong serverCVE-2020-5260git · CVSS 9.3 · 15% likely

   CWE-20

4. Malicious URLs can still cause Git to send a stored credential to the wrong serverCVE-2020-11008git · CVSS 4 · 3.9% likely

   CWE-20

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.