Skip to content
OpenAdvisories

Package · Alpine

mercurial

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-2361

    Mercurial SCM Web Interface cross site scripting

    A vulnerability was found in Mercurial SCM 4.5.3/71.19.145.211. It has been declared as problematic. This vulnerability affects unknown code of the component Web Interface. The manipulation of the argument cmd leads to cross site scripting. The attack can be …

    Mercurial SCM mercurial mercurial Debian Ubuntu Alpine
  • Medium 5.1
    CVE-2019-3902

    Mercurial Path Traversal/Link Following vulnerability

    A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and write files outside a repository.

    The Mercurial Project mercurial mercurial mercurial Debian Ubuntu Alpine PyPI