mercurial@4.8 vulnerabilities

Fast scalable distributed SCM (revision control, version control) system

Direct Vulnerabilities

Known vulnerabilities in the mercurial package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Arbitrary File Overwrite

mercurial is a distributed SCM tool written in Python.

Affected versions of this package are vulnerable to Arbitrary File Overwrite. It is possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and write files outside of a repository.

How to fix Arbitrary File Overwrite?

Upgrade mercurial to version 4.9 or higher.

[,4.9)