Apple Security Advisory 2020-05-20-1 - Xcode 11.5 is now available and addresses an issue where a crafted git URL that contains a newline in it may cause credential information to be provided for the wrong host.
e35976b46ec8572069af8ecfa516e7c0af3685276f36b89073c48c53fa832ce2