Skip to content
OpenAdvisories

Vendor

Mercurial

2 known vulnerabilities.

Products

mercurial 1 SCM 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-2361

    Mercurial SCM Web Interface cross site scripting

    A vulnerability was found in Mercurial SCM 4.5.3/71.19.145.211. It has been declared as problematic. This vulnerability affects unknown code of the component Web Interface. The manipulation of the argument cmd leads to cross site scripting. The attack can be …

    Mercurial SCM mercurial mercurial Debian Ubuntu Alpine
  • Medium 5.9
    CVE-2010-4237

    Mercurial Improper Certificate Validation vulnerability

    Mercurial before 1.6.4 fails to verify the Common Name field of SSL certificates which allows remote attackers who acquire a certificate signed by a Certificate Authority to perform a man-in-the-middle attack.

    Mercurial mercurial mercurial mercurial Debian PyPI