Yes, the actual vulnerability is that you can commit .Git/config or .gIt/config ...

		yincrash on Dec 18, 2014 \| parent \| context \| favorite \| on: Git client vulnerability announced Yes, the actual vulnerability is that you can commit .Git/config or .gIt/config etc., and on case insensitive filesystem, checking that out will overwrite .git/config.