Skip to content
OpenAdvisories
High DLA-459-1 1 CVE

mercurial - security update

Published May 6, 2016 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 mercurial 2.2.2-4+deb7u3

Vulnerabilities 1

  • High 8.8

    Mercurial vulnerable to arbitrary code execution when converting Git repos

    The convert extension in Mercurial before 3.8 might allow context-dependent attackers to execute arbitrary code via a crafted git repository name.