Search for packages
| purl | pkg:pypi/mercurial@4.6rc0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1kmd-1kun-qbdd
Aliases: CVE-2018-13346 GHSA-9xv4-r2hf-26gh PYSEC-2018-88 |
The mpatch_apply function in mpatch.c in Mercurial before 4.6.1 incorrectly proceeds in cases where the fragment start is past the end of the original data, aka OVE-20180430-0004. |
Affected by 2 other vulnerabilities. |
|
VCID-hhwu-knps-qqfw
Aliases: CVE-2018-13347 GHSA-3mjj-mr4f-qxmx PYSEC-2018-89 |
mpatch.c in Mercurial before 4.6.1 mishandles integer addition and subtraction, aka OVE-20180430-0002. |
Affected by 2 other vulnerabilities. |
|
VCID-t9gd-va4q-a3ga
Aliases: CVE-2018-17983 GHSA-p575-cf9h-wv42 PYSEC-2018-91 |
cext/manifest.c in Mercurial before 4.7.2 has an out-of-bounds read during parsing of a malformed manifest entry. |
Affected by 1 other vulnerability. |
|
VCID-v91s-ety2-x7au
Aliases: CVE-2018-13348 GHSA-3v62-ww8w-758m PYSEC-2018-90 |
The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001. |
Affected by 2 other vulnerabilities. |
|
VCID-z346-9s62-afaz
Aliases: CVE-2019-3902 GHSA-mq66-vcfc-8246 PYSEC-2019-188 |
A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and write files outside a repository. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||