salt before 2015.5.5 leaks git usernames and passwords to the log.
"https://github.com/pypa/advisory-database/blob/main/vulns/salt/PYSEC-2017-70.yaml"