MEDIUM5.9PyPI
PYSEC-2026-665· CVE-2010-4237, GHSA-7gf7-7wx4-mxmwMercurial Improper Certificate Validation vulnerability
Modified: 7/6/2026
package
PyPI/mercurial
pkg:pypi/mercurial
—PyPI
PYSEC-2026-666· CVE-2008-2942, GHSA-v2gw-x5jf-pgwvMercurial Directory traversal vulnerability
Modified: 7/6/2026
CRITICAL9.8PyPI
GHSA-3mjj-mr4f-qxmx· CVE-2018-13347, PYSEC-2018-89Mercurial mishandles integer addition and subtraction
Modified: 9/25/2024
CRITICAL9.8PyPI
GHSA-3pmw-h7j4-rf54· CVE-2014-9462, PYSEC-2015-14Mercurial vulnerable to arbitrary command execution via a crafted repository name in a clone command
Modified: 9/24/2024
CRITICAL9.8PyPI
GHSA-3qmg-c9vc-r47j· CVE-2017-1000116, PYSEC-2017-89Mercurial is vulnerable to shell injection attack
Modified: 9/25/2024
HIGH7.5PyPI
GHSA-3v62-ww8w-758m· CVE-2018-13348, PYSEC-2018-90Mercurial Improper Input Validation vulnerability
Modified: 9/25/2024
HIGH8.8PyPI
GHSA-49cw-434h-qc57· CVE-2016-3105, PYSEC-2016-28Mercurial vulnerable to arbitrary code execution when converting Git repos
Modified: 9/30/2024
CRITICAL9.1PyPI
GHSA-4mr4-7vjv-9hm6· CVE-2018-1000132, PYSEC-2018-87Mercurial Incorrect Access Control vulnerability
Modified: 9/24/2024
CRITICAL9.8PyPI
GHSA-6v56-cpg6-3rpx· CVE-2017-17458, PYSEC-2017-90Mercurial vulnerable to arbitrary code injection
Modified: 9/25/2024
CRITICAL9.8MavenPyPI
GHSA-6vvc-c2m3-cjf3· CVE-2014-9390, PYSEC-2020-217JGit Improper Input Validation vulnerability
Modified: 9/25/2024
MEDIUM5.9PyPI
GHSA-7gf7-7wx4-mxmw· CVE-2010-4237, PYSEC-2026-665Mercurial Improper Certificate Validation vulnerability
Modified: 7/6/2026
HIGH8.8PyPI
GHSA-8fm8-7365-5rh2· CVE-2016-3069, PYSEC-2016-27Mercurial vulnerable to arbitrary code execution via a crafted name when converting a Git repository
Modified: 9/24/2024
HIGH8.8PyPI
GHSA-9vjf-jjcq-3gh7· CVE-2016-3630, PYSEC-2016-29Mercurial arbitrary code execution vulnerability
Modified: 12/4/2024
HIGH7.5PyPI
GHSA-9xv4-r2hf-26gh· CVE-2018-13346, PYSEC-2018-88Mercurial Improper Input Validation vulnerability
Modified: 9/25/2024
HIGH8.8PyPI
GHSA-ghjx-3jg5-h6r2· CVE-2017-9462, PYSEC-2017-91Mercurial has Incorrect Permission Assignment for Critical Resource
Modified: 10/1/2024
HIGH7.5PyPI
GHSA-hvr9-wr9p-grgr· CVE-2017-1000115, PYSEC-2017-88Mercurial missing symlink check
Modified: 9/24/2024
HIGH8.8PyPI
GHSA-j7c2-rqm3-c97m· CVE-2016-3068, PYSEC-2016-26Mercurial arbitrary code execution via a crafted git ext:: URL
Modified: 9/24/2024
MEDIUM5.9PyPI
GHSA-mq66-vcfc-8246· CVE-2019-3902, PYSEC-2019-188Mercurial Path Traversal/Link Following vulnerability
Modified: 9/25/2024
CRITICAL9.1PyPI
GHSA-p575-cf9h-wv42· CVE-2018-17983, PYSEC-2018-91Mercurial Out-of-bounds Read vulnerability
Modified: 9/24/2024
MEDIUMPyPI
GHSA-v2gw-x5jf-pgwv· CVE-2008-2942, PYSEC-2026-666Mercurial Directory traversal vulnerability
Modified: 7/6/2026
—PyPI
PYSEC-2015-14· CVE-2014-9462, GHSA-3pmw-h7j4-rf54Modified: 6/10/2026
—PyPI
PYSEC-2016-26· CVE-2016-3068, GHSA-j7c2-rqm3-c97mModified: 6/10/2026
—PyPI
PYSEC-2016-27· CVE-2016-3069, GHSA-8fm8-7365-5rh2Modified: 6/10/2026
—PyPI
PYSEC-2016-28· CVE-2016-3105, GHSA-49cw-434h-qc57Modified: 6/10/2026
—PyPI
PYSEC-2016-29· CVE-2016-3630, GHSA-9vjf-jjcq-3gh7Modified: 6/10/2026
—PyPI
PYSEC-2017-88· CVE-2017-1000115, GHSA-hvr9-wr9p-grgrModified: 6/10/2026
—PyPI
PYSEC-2017-89· CVE-2017-1000116, GHSA-3qmg-c9vc-r47jModified: 6/10/2026
—PyPI
PYSEC-2017-90· CVE-2017-17458, GHSA-6v56-cpg6-3rpxModified: 6/10/2026
—PyPI
PYSEC-2017-91· CVE-2017-9462, GHSA-ghjx-3jg5-h6r2Modified: 11/8/2023
—PyPI
PYSEC-2018-87· CVE-2018-1000132, GHSA-4mr4-7vjv-9hm6Modified: 6/10/2026
—PyPI
PYSEC-2018-88· CVE-2018-13346, GHSA-9xv4-r2hf-26ghModified: 6/10/2026
—PyPI
PYSEC-2018-89· CVE-2018-13347, GHSA-3mjj-mr4f-qxmxModified: 6/10/2026
—PyPI
PYSEC-2018-90· CVE-2018-13348, GHSA-3v62-ww8w-758mModified: 6/10/2026
—PyPI
PYSEC-2018-91· CVE-2018-17983, GHSA-p575-cf9h-wv42Modified: 6/10/2026
—PyPI
PYSEC-2019-188· CVE-2019-3902, GHSA-mq66-vcfc-8246Modified: 6/10/2026
—PyPI
PYSEC-2020-217· CVE-2014-9390, GHSA-6vvc-c2m3-cjf3Modified: 6/10/2026