Announcing the May 2018 Git Security Vulnerability
https://blogs.msdn.microsoft.com/devops/2018/05/29/announcing-the-may-2018-git-security-vulnerability/ [blogs.msdn.microsoft.com]
2018-05-30 01:54
Son of .. returns.
The solution to this problem is quite simple and effective: submodule’s folder names are now examined more closely by Git clients. They can no longer contain .. as a path segment, and they cannot be symbolic links, so they must be within the .git repository folder, and not in the actual repository’s working directory.
source: HN