Git for Windows 2.26.2 is released, this is a security patch.
The main problem solved is CVE-2020-11008: when using specially crafted URLs that contain line breaks or empty hosts or lack a resolution structure scheme, the credential helper mechanism can be spoofed to provide credential information that is not suitable for the protocol used and the contacted host.
On the other hand, the performance of working tree updates (eg git checkout, git reset --hard) on sparse checkout has been improved. At the same time, two versions of updates were followed: Git v2.26.2 and tig v2.5.1 .
In addition, a fallback problem in gitk was fixed, which prevented it from running in a bare warehouse.
See the update instructions for details:
https://github.com/git-for-windows/git/releases/tag/v2.26.2.windows.1