Skip to content
OpenAdvisories
Medium DLA-4094-1 1 CVE

mercurial - security update

Published Mar 27, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 mercurial 5.6.1-4+deb11u1

Vulnerabilities 1

  • Medium 4.3
    CVE-2025-2361

    Mercurial SCM Web Interface cross site scripting

    A vulnerability was found in Mercurial SCM 4.5.3/71.19.145.211. It has been declared as problematic. This vulnerability affects unknown code of the component Web Interface. The manipulation of the argument cmd leads to cross site scripting. The attack can be …

    Mercurial SCM mercurial mercurial Debian Ubuntu Alpine