I found a vulnerability in git. CVE-2025-48384: Breaking git with a carriage return and cloning RCE - dgl.cx/2025/07/git-clone-submo…
As the post explains this is one of my favourite classes of vulnerability, using characters that are old and sometimes forgotten.
