Skip to content
OpenAdvisories
Medium DSA-5883-1 1 CVE

mercurial - security update

Published Mar 22, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 12 mercurial 6.3.2-1+deb12u1

Vulnerabilities 1

  • Medium 4.3
    CVE-2025-2361

    Mercurial SCM Web Interface cross site scripting

    A vulnerability was found in Mercurial SCM 4.5.3/71.19.145.211. It has been declared as problematic. This vulnerability affects unknown code of the component Web Interface. The manipulation of the argument cmd leads to cross site scripting. The attack can be …

    Mercurial SCM mercurial mercurial Debian Ubuntu Alpine