Skip to content
OpenAdvisories

Package · PyPI

mercurial

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.9
    CVE-2010-4237

    Mercurial Improper Certificate Validation vulnerability

    Mercurial before 1.6.4 fails to verify the Common Name field of SSL certificates which allows remote attackers who acquire a certificate signed by a Certificate Authority to perform a man-in-the-middle attack.

    Mercurial mercurial mercurial mercurial Debian PyPI
  • Medium 5.1
    CVE-2019-3902

    Mercurial Path Traversal/Link Following vulnerability

    A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and write files outside a repository.

    The Mercurial Project mercurial mercurial mercurial Debian Ubuntu Alpine PyPI
  • Medium —
    CVE-2008-2942

    Mercurial Directory traversal vulnerability

    Directory traversal vulnerability in patch.py in Mercurial 1.0.1 allows user-assisted attackers to modify arbitrary files via ".." (dot dot) sequences in a patch file.

    mercurial mercurial Debian PyPI