Git vulnerability with submodules

This post addresses CVE 2017-1000117, a Git security vulnerability related to URL parsing and embedded command-line options within SSH URLs, which can be exploited through submodules to execute arbitrary code. The solution implemented is to block submodule URLs if the SSH hostname begins with a hyphen ('-'), indicating a potential command-line option. It also provides guidance on updating Git clients for Windows, Visual Studio, and hosted build agents.