Skip to content
OpenAdvisories
Critical DLA-1331-1 1 CVE

mercurial - security update

Published Mar 30, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 mercurial 2.2.2-4+deb7u7

Vulnerabilities 1

  • Critical 9.1
    CVE-2018-1000132

    Mercurial Incorrect Access Control vulnerability

    Mercurial version 4.5 and earlier contains a Incorrect Access Control (CWE-285) vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via network connectivity. This vulnerability appears to have bee…

    mercurial mercurial mercurial mercurial Debian Ubuntu Alpine PyPI