Vendor
Central Dogma's Git mirror SSH client disables host-key verification, allowing on-path attackers to perform Man-in-the-Middle (MitM) attacks to exfiltrate sensitive configuration data or inject malicious commits.