{"id":64076,"date":"2022-04-12T10:51:41","date_gmt":"2022-04-12T17:51:41","guid":{"rendered":"https:\/\/github.blog\/?p=64076"},"modified":"2022-04-12T10:51:41","modified_gmt":"2022-04-12T17:51:41","slug":"git-security-vulnerability-announced","status":"publish","type":"post","link":"https:\/\/github.blog\/open-source\/git\/git-security-vulnerability-announced\/","title":{"rendered":"Git security vulnerability announced"},"content":{"rendered":"<p>Today, <a href=\"#\"><a href=\"https:\/\/lore.kernel.org\/git\/xmqqv8veb5i6.fsf@gitster.g\/\">the Git project released new versions<\/a><\/a> which address a pair of security vulnerabilities.<\/p>\n<p>GitHub is unaffected by these vulnerabilities<sup id=\"fnref-64076-1\"><a href=\"#fn-64076-1\" class=\"jetpack-footnote\" title=\"Read footnote.\">1<\/a><\/sup>. However, you should be aware of them and upgrade your local installation of Git, especially if you are using Git for Windows, or you use Git on a multi-user machine.<\/p>\n<h2 id=\"cve-2022-24765\"><a class=\"heading-link\" href=\"#cve-2022-24765\">CVE-2022-24765<span class=\"heading-hash pl-2 text-italic text-bold\" aria-hidden=\"true\"><\/span><\/a><\/h2>\n<p>This vulnerability affects users working on multi-user machines where a malicious actor could create a <code>.git<\/code> directory in a shared location above a victim&#8217;s current working directory. On Windows, for example, an attacker could create <code>C:\\.git\\config<\/code>, which would cause all <code>git<\/code> invocations that occur outside of a repository to read its configured values.<\/p>\n<p>Since some configuration variables (such as <a href=\"https:\/\/git-scm.com\/docs\/git-config\/2.35.2#Documentation\/git-config.txt-corefsmonitor\"><code>core.fsmonitor<\/code><\/a>) cause Git to execute arbitrary commands, this can lead to arbitrary command<br \/>\nexecution when working on a shared machine.<\/p>\n<p>The most effective way to protect against this vulnerability is to upgrade to <a href=\"#\">Git v2.35.2<\/a>. This version changes Git&#8217;s behavior when looking for a top-level <code>.git<\/code> directory to stop when its directory traversal changes ownership from the current user. (If you wish to make an exception to this behavior, you can use the new multi-valued <a href=\"https:\/\/git-scm.com\/docs\/git-config\/2.35.2#Documentation\/git-config.txt-safedirectory\"><code>safe.directory<\/code><\/a> configuration).<\/p>\n<p>If you can&#8217;t upgrade immediately, the most effective ways to reduce your risk are the following:<\/p>\n<ul>\n<li>Define the <a href=\"https:\/\/git-scm.com\/docs\/git\/2.35.2#Documentation\/git.txt-codeGITCEILINGDIRECTORIEScode\"><code>GIT_CEILING_DIRECTORIES<\/code> environment variable<\/a> to contain the parent directory of your user profile (i.e., <code>\/Users<\/code> on macOS,<br \/>\n<code>\/home<\/code> on Linux, and <code>C:\\Users<\/code> on Windows).<\/li>\n<li>Avoid running Git on multi-user machines when your current working directory is not within a trusted repository.<\/li>\n<\/ul>\n<p>Note that many tools (such as the Git for Windows installation of Git Bash, posh-git, and Visual Studio) run Git commands under the hood. If you are on a multi-user machine, avoid using these tools until you have upgraded to the latest release.<\/p>\n<p>Credit for finding this vulnerability goes to \u4fde\u6668\u4e1c.<\/p>\n<p>&#91;<a href=\"https:\/\/github.com\/git-for-windows\/git\/security\/advisories\/GHSA-vw2c-22j4-2fh2\">source<\/a>&#93;<\/p>\n<h2 id=\"cve-2022-24767\"><a class=\"heading-link\" href=\"#cve-2022-24767\">CVE-2022-24767<span class=\"heading-hash pl-2 text-italic text-bold\" aria-hidden=\"true\"><\/span><\/a><\/h2>\n<p>This vulnerability affects the Git for Windows uninstaller, which runs in the user&#8217;s temporary directory. Because the <code>SYSTEM<\/code> user account inherits the<br \/>\ndefault permissions of <code>C:\\Windows\\Temp<\/code> (which is world-writable), any authenticated user can place malicious <code>.dll<\/code> files which are loaded when<br \/>\nrunning the Git for Windows uninstaller when run via the <code>SYSTEM<\/code> account.<\/p>\n<p>The most effective way to protect against this vulnerability is to upgrade to <a href=\"https:\/\/github.com\/git-for-windows\/git\/releases\/tag\/v2.35.2.windows.1\">Git for Windows v2.35.2<\/a>. If you can&#8217;t upgrade<br \/>\nimmediately, reduce your risk with the following:<\/p>\n<ul>\n<li>Avoid running the uninstaller until after upgrading<\/li>\n<li>Override the <code>SYSTEM<\/code> user&#8217;s <code>TMP<\/code> environment variable to a directory which can only be written to by the <code>SYSTEM<\/code> user<\/li>\n<li>Remove unknown <code>.dll<\/code> files from <code>C:\\Windows\\Temp<\/code> before running the<br \/>\nuninstaller<\/li>\n<li>Run the uninstaller under an administrator account rather than as the<br \/>\n<code>SYSTEM<\/code> user<\/li>\n<\/ul>\n<p>Credit for finding this vulnerability goes to the Lockheed Martin Red Team.<\/p>\n<p>&#91;<a href=\"https:\/\/github.com\/git-for-windows\/git\/security\/advisories\/GHSA-gf48-x3vr-j5c3\">source<\/a>&#93;<\/p>\n<h2 id=\"download-git-2-35-2\"><a class=\"heading-link\" href=\"#download-git-2-35-2\"><a href=\"https:\/\/lore.kernel.org\/git\/xmqqv8veb5i6.fsf@gitster.g\/\">Download Git 2.35.2<\/a><span class=\"heading-hash pl-2 text-italic text-bold\" aria-hidden=\"true\"><\/span><\/a><\/h2>\n<div class=\"footnotes\">\n<hr \/>\n<ol>\n<li id=\"fn-64076-1\">\nGitHub does not run <code>git<\/code> outside of known repositories, so is not susceptible to the attack described by <code>CVE-2022-24765<\/code>. Likewise, GitHub does not use Git for Windows, and so is unaffected by <code>CVE-2022-24767<\/code> entirely.&#160;<a href=\"#fnref-64076-1\" title=\"Return to main content.\">&#8617;<\/a>\n<\/li>\n<\/ol>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Upgrade your local installation of Git, especially if you are using Git for Windows, or you use Git on a multi-user machine.<\/p>\n","protected":false},"author":1282,"featured_media":64052,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_gh_post_show_toc":"no","_gh_post_is_no_robots":"","_gh_post_is_featured":"no","_gh_post_is_excluded":"no","_gh_post_is_unlisted":"","_gh_post_related_link_1":"","_gh_post_related_link_2":"","_gh_post_related_link_3":"","_gh_post_sq_img":"","_gh_post_sq_img_id":"","_gh_post_cta_title":"","_gh_post_cta_text":"","_gh_post_cta_link":"","_gh_post_cta_button":"Click Here to Learn More","_gh_post_recirc_hide":"","_gh_post_recirc_col_1":"","_gh_post_recirc_col_2":"","_gh_post_recirc_col_3":"","_gh_post_recirc_col_4":"","_featured_video":"","_gh_post_additional_query_params":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"{title}\n\n{excerpt}\n\n{url}","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"_wpas_customize_per_network":false,"jetpack_post_was_ever_published":false,"_links_to":"","_links_to_target":""},"categories":[3330,67],"tags":[2586],"coauthors":[2189],"class_list":["post-64076","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-git","category-open-source","tag-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.6 (Yoast SEO v28.6) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Git security vulnerability announced - The GitHub Blog<\/title>\n<meta name=\"description\" content=\"GitHub is unaffected by the vulnerabilities, but users should be aware of them and upgrade their local installation of Git.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/github.blog\/open-source\/git\/git-security-vulnerability-announced\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Git security vulnerability announced\" \/>\n<meta property=\"og:description\" content=\"Upgrade your local installation of Git, especially if you are using Git for Windows, or you use Git on a multi-user machine.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/github.blog\/open-source\/git\/git-security-vulnerability-announced\/\" \/>\n<meta property=\"og:site_name\" content=\"The GitHub Blog\" \/>\n<meta property=\"article:published_time\" content=\"2022-04-12T17:51:41+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/github.blog\/wp-content\/uploads\/2022\/04\/Security-Community@2x.png?fit=2400%2C1260\" \/>\n\t<meta property=\"og:image:width\" content=\"2400\" \/>\n\t<meta property=\"og:image:height\" content=\"1260\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Taylor Blau\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:description\" content=\"Upgrade your local installation of Git, especially if you are using Git for Windows, or you use Git on a multi-user machine.\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Taylor Blau\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/github.blog\\\/open-source\\\/git\\\/git-security-vulnerability-announced\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/github.blog\\\/open-source\\\/git\\\/git-security-vulnerability-announced\\\/\"},\"author\":{\"name\":\"Taylor Blau\",\"@id\":\"https:\\\/\\\/github.blog\\\/#\\\/schema\\\/person\\\/f2a5dc09d09f41c8c731679cc07da524\"},\"headline\":\"Git security vulnerability announced\",\"datePublished\":\"2022-04-12T17:51:41+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/github.blog\\\/open-source\\\/git\\\/git-security-vulnerability-announced\\\/\"},\"wordCount\":467,\"image\":{\"@id\":\"https:\\\/\\\/github.blog\\\/open-source\\\/git\\\/git-security-vulnerability-announced\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/github.blog\\\/wp-content\\\/uploads\\\/2022\\\/04\\\/Security-Community@2x.png?fit=2400%2C1260\",\"keywords\":[\"Security\"],\"articleSection\":[\"Git\",\"Open Source\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/github.blog\\\/open-source\\\/git\\\/git-security-vulnerability-announced\\\/\",\"url\":\"https:\\\/\\\/github.blog\\\/open-source\\\/git\\\/git-security-vulnerability-announced\\\/\",\"name\":\"Git security vulnerability announced - The GitHub Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/github.blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/github.blog\\\/open-source\\\/git\\\/git-security-vulnerability-announced\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/github.blog\\\/open-source\\\/git\\\/git-security-vulnerability-announced\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/github.blog\\\/wp-content\\\/uploads\\\/2022\\\/04\\\/Security-Community@2x.png?fit=2400%2C1260\",\"datePublished\":\"2022-04-12T17:51:41+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/github.blog\\\/#\\\/schema\\\/person\\\/f2a5dc09d09f41c8c731679cc07da524\"},\"description\":\"GitHub is unaffected by the vulnerabilities, but users should be aware of them and upgrade their local installation of Git.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/github.blog\\\/open-source\\\/git\\\/git-security-vulnerability-announced\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/github.blog\\\/open-source\\\/git\\\/git-security-vulnerability-announced\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/github.blog\\\/open-source\\\/git\\\/git-security-vulnerability-announced\\\/#primaryimage\",\"url\":\"https:\\\/\\\/github.blog\\\/wp-content\\\/uploads\\\/2022\\\/04\\\/Security-Community@2x.png?fit=2400%2C1260\",\"contentUrl\":\"https:\\\/\\\/github.blog\\\/wp-content\\\/uploads\\\/2022\\\/04\\\/Security-Community@2x.png?fit=2400%2C1260\",\"width\":2400,\"height\":1260},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/github.blog\\\/open-source\\\/git\\\/git-security-vulnerability-announced\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/github.blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Open Source\",\"item\":\"https:\\\/\\\/github.blog\\\/open-source\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Git\",\"item\":\"https:\\\/\\\/github.blog\\\/open-source\\\/git\\\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Git security vulnerability announced\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/github.blog\\\/#website\",\"url\":\"https:\\\/\\\/github.blog\\\/\",\"name\":\"The GitHub Blog\",\"description\":\"Updates, ideas, and inspiration from GitHub to help developers build and design software.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/github.blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/github.blog\\\/#\\\/schema\\\/person\\\/f2a5dc09d09f41c8c731679cc07da524\",\"name\":\"Taylor Blau\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d5f3476f26b6f99cbb6b467e7ed7482f5762c8157bc73f569196e428bdcbea25?s=96&d=mm&r=g2ce44289191883c54a58a554d8fc874a\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d5f3476f26b6f99cbb6b467e7ed7482f5762c8157bc73f569196e428bdcbea25?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d5f3476f26b6f99cbb6b467e7ed7482f5762c8157bc73f569196e428bdcbea25?s=96&d=mm&r=g\",\"caption\":\"Taylor Blau\"},\"description\":\"Taylor Blau is a Principal Software Engineer at GitHub where he works on Git.\",\"sameAs\":[\"https:\\\/\\\/ttaylorr.com\"],\"url\":\"https:\\\/\\\/github.blog\\\/author\\\/ttaylorr\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Git security vulnerability announced - The GitHub Blog","description":"GitHub is unaffected by the vulnerabilities, but users should be aware of them and upgrade their local installation of Git.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/github.blog\/open-source\/git\/git-security-vulnerability-announced\/","og_locale":"en_US","og_type":"article","og_title":"Git security vulnerability announced","og_description":"Upgrade your local installation of Git, especially if you are using Git for Windows, or you use Git on a multi-user machine.","og_url":"https:\/\/github.blog\/open-source\/git\/git-security-vulnerability-announced\/","og_site_name":"The GitHub Blog","article_published_time":"2022-04-12T17:51:41+00:00","og_image":[{"width":2400,"height":1260,"url":"https:\/\/github.blog\/wp-content\/uploads\/2022\/04\/Security-Community@2x.png?fit=2400%2C1260","type":"image\/png"}],"author":"Taylor Blau","twitter_card":"summary_large_image","twitter_description":"Upgrade your local installation of Git, especially if you are using Git for Windows, or you use Git on a multi-user machine.","twitter_misc":{"Written by":"Taylor Blau","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/github.blog\/open-source\/git\/git-security-vulnerability-announced\/#article","isPartOf":{"@id":"https:\/\/github.blog\/open-source\/git\/git-security-vulnerability-announced\/"},"author":{"name":"Taylor Blau","@id":"https:\/\/github.blog\/#\/schema\/person\/f2a5dc09d09f41c8c731679cc07da524"},"headline":"Git security vulnerability announced","datePublished":"2022-04-12T17:51:41+00:00","mainEntityOfPage":{"@id":"https:\/\/github.blog\/open-source\/git\/git-security-vulnerability-announced\/"},"wordCount":467,"image":{"@id":"https:\/\/github.blog\/open-source\/git\/git-security-vulnerability-announced\/#primaryimage"},"thumbnailUrl":"https:\/\/github.blog\/wp-content\/uploads\/2022\/04\/Security-Community@2x.png?fit=2400%2C1260","keywords":["Security"],"articleSection":["Git","Open Source"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/github.blog\/open-source\/git\/git-security-vulnerability-announced\/","url":"https:\/\/github.blog\/open-source\/git\/git-security-vulnerability-announced\/","name":"Git security vulnerability announced - The GitHub Blog","isPartOf":{"@id":"https:\/\/github.blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/github.blog\/open-source\/git\/git-security-vulnerability-announced\/#primaryimage"},"image":{"@id":"https:\/\/github.blog\/open-source\/git\/git-security-vulnerability-announced\/#primaryimage"},"thumbnailUrl":"https:\/\/github.blog\/wp-content\/uploads\/2022\/04\/Security-Community@2x.png?fit=2400%2C1260","datePublished":"2022-04-12T17:51:41+00:00","author":{"@id":"https:\/\/github.blog\/#\/schema\/person\/f2a5dc09d09f41c8c731679cc07da524"},"description":"GitHub is unaffected by the vulnerabilities, but users should be aware of them and upgrade their local installation of Git.","breadcrumb":{"@id":"https:\/\/github.blog\/open-source\/git\/git-security-vulnerability-announced\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/github.blog\/open-source\/git\/git-security-vulnerability-announced\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/github.blog\/open-source\/git\/git-security-vulnerability-announced\/#primaryimage","url":"https:\/\/github.blog\/wp-content\/uploads\/2022\/04\/Security-Community@2x.png?fit=2400%2C1260","contentUrl":"https:\/\/github.blog\/wp-content\/uploads\/2022\/04\/Security-Community@2x.png?fit=2400%2C1260","width":2400,"height":1260},{"@type":"BreadcrumbList","@id":"https:\/\/github.blog\/open-source\/git\/git-security-vulnerability-announced\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/github.blog\/"},{"@type":"ListItem","position":2,"name":"Open Source","item":"https:\/\/github.blog\/open-source\/"},{"@type":"ListItem","position":3,"name":"Git","item":"https:\/\/github.blog\/open-source\/git\/"},{"@type":"ListItem","position":4,"name":"Git security vulnerability announced"}]},{"@type":"WebSite","@id":"https:\/\/github.blog\/#website","url":"https:\/\/github.blog\/","name":"The GitHub Blog","description":"Updates, ideas, and inspiration from GitHub to help developers build and design software.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/github.blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/github.blog\/#\/schema\/person\/f2a5dc09d09f41c8c731679cc07da524","name":"Taylor Blau","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/d5f3476f26b6f99cbb6b467e7ed7482f5762c8157bc73f569196e428bdcbea25?s=96&d=mm&r=g2ce44289191883c54a58a554d8fc874a","url":"https:\/\/secure.gravatar.com\/avatar\/d5f3476f26b6f99cbb6b467e7ed7482f5762c8157bc73f569196e428bdcbea25?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d5f3476f26b6f99cbb6b467e7ed7482f5762c8157bc73f569196e428bdcbea25?s=96&d=mm&r=g","caption":"Taylor Blau"},"description":"Taylor Blau is a Principal Software Engineer at GitHub where he works on Git.","sameAs":["https:\/\/ttaylorr.com"],"url":"https:\/\/github.blog\/author\/ttaylorr\/"}]}},"jetpack_publicize_connections":[],"jetpack_shortlink":"https:\/\/wp.me\/pamS32-gFu","jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/github.blog\/wp-content\/uploads\/2022\/04\/Security-Community@2x.png?fit=2400%2C1260","_links":{"self":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/posts\/64076","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/users\/1282"}],"replies":[{"embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/comments?post=64076"}],"version-history":[{"count":19,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/posts\/64076\/revisions"}],"predecessor-version":[{"id":64164,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/posts\/64076\/revisions\/64164"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/media\/64052"}],"wp:attachment":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/media?parent=64076"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/categories?post=64076"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/tags?post=64076"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/coauthors?post=64076"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}