Skip to content
OpenAdvisories

Package · Debian

mercurial

20 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-2361

    Mercurial SCM Web Interface cross site scripting

    A vulnerability was found in Mercurial SCM 4.5.3/71.19.145.211. It has been declared as problematic. This vulnerability affects unknown code of the component Web Interface. The manipulation of the argument cmd leads to cross site scripting. The attack can be …

    Mercurial SCM mercurial mercurial Debian Ubuntu Alpine
  • Medium 5.9
    CVE-2010-4237

    Mercurial Improper Certificate Validation vulnerability

    Mercurial before 1.6.4 fails to verify the Common Name field of SSL certificates which allows remote attackers who acquire a certificate signed by a Certificate Authority to perform a man-in-the-middle attack.

    Mercurial mercurial mercurial mercurial Debian PyPI
  • Medium 5.1
    CVE-2019-3902

    Mercurial Path Traversal/Link Following vulnerability

    A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and write files outside a repository.

    The Mercurial Project mercurial mercurial mercurial Debian Ubuntu Alpine PyPI
  • Medium —
    CVE-2008-2942

    Mercurial Directory traversal vulnerability

    Directory traversal vulnerability in patch.py in Mercurial 1.0.1 allows user-assisted attackers to modify arbitrary files via ".." (dot dot) sequences in a patch file.

    mercurial mercurial Debian PyPI