Vulnerabilities for mercurial

First version without a known vulnerability: 4.9

Details

• GHSA-6vvc-c2m3-cjf32022-05-17

  JGit Improper Input Validation vulnerability

  Fixed in: 3.5.3, 3.2.3

• GHSA-49cw-434h-qc572022-05-17

  Mercurial vulnerable to arbitrary code execution when converting Git repos

  Fixed in: 3.8, 3.8-rc

• GHSA-9vjf-jjcq-3gh72022-05-14

  Mercurial arbitrary code execution vulnerability

  Fixed in: 3.7.3

• GHSA-8fm8-7365-5rh22022-05-14

  Mercurial vulnerable to arbitrary code execution via a crafted name when converting a Git repository

  Fixed in: 3.7.3

• GHSA-j7c2-rqm3-c97m2022-05-14

  Mercurial arbitrary code execution via a crafted git ext:: URL

  Fixed in: 3.7.3

• GHSA-3pmw-h7j4-rf542022-05-14

  Mercurial vulnerable to arbitrary command execution via a crafted repository name in a clone command

  Fixed in: 3.2.4

• GHSA-p575-cf9h-wv422022-05-14

  Mercurial Out-of-bounds Read vulnerability

  Fixed in: 4.7.2

• GHSA-hvr9-wr9p-grgr2022-05-14

  Mercurial missing symlink check

  Fixed in: 4.3.1, 4.3

• GHSA-3qmg-c9vc-r47j2022-05-13

  Mercurial is vulnerable to shell injection attack

  Fixed in: 4.3

• GHSA-6v56-cpg6-3rpx2022-05-13

  Mercurial vulnerable to arbitrary code injection

  Fixed in: 4.4.1

• GHSA-3mjj-mr4f-qxmx2022-05-13

  Mercurial mishandles integer addition and subtraction

  Fixed in: 4.6.1

• GHSA-3v62-ww8w-758m2022-05-13

  Mercurial Improper Input Validation vulnerability

  Fixed in: 4.6.1

• GHSA-4mr4-7vjv-9hm62022-05-13

  Mercurial Incorrect Access Control vulnerability

  Fixed in: 4.5.1

• GHSA-9xv4-r2hf-26gh2022-05-13

  Mercurial Improper Input Validation vulnerability

  Fixed in: 4.6.1

• GHSA-v2gw-x5jf-pgwv2022-05-01

  Mercurial Directory traversal vulnerability

  Fixed in: 1.0.2

• GHSA-7gf7-7wx4-mxmw2022-04-21

  Mercurial Improper Certificate Validation vulnerability

  Fixed in: 1.6.4

• GHSA-mq66-vcfc-82462022-02-15

  Mercurial Path Traversal/Link Following vulnerability

  Fixed in: 4.9

• GHSA-ghjx-3jg5-h6r22018-07-13

  Mercurial has Incorrect Permission Assignment for Critical Resource

  Fixed in: 4.1.3