https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:48:44.510009+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2018-00202 bdu:2018-00202 2026-10-03T11:48:44.638425+00:00 bdu:2018-00202 https://cve.radiocsirt.org/vuln/cnvd-2018-00314 cnvd-2018-00314 2026-10-03T11:48:44.638464+00:00 cnvd-2018-00314 https://cve.radiocsirt.org/vuln/euvd-2026-79537 EUVD-2026-79537 2026-10-03T11:48:44.638479+00:00 EUVD-2026-79537 https://cve.radiocsirt.org/vuln/fkie_cve-2017-17458 fkie_cve-2017-17458 2026-10-03T11:48:44.638492+00:00

In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause Git subrepositories to run arbitrary code in the form of a .git/hooks/post-update script checked into the repository. Typical use of Mercurial prevents construction of such repositories, but they can be created programmatically.

 https://cve.radiocsirt.org/vuln/ghsa-6v56-cpg6-3rpx GHSA-6v56-cpg6-3rpx — Mercurial vulnerable to arbitrary code injection 2026-10-03T11:48:44.638521+00:00

Affected: PyPI: mercurial

In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause Git subrepositories to run arbitrary code in the form of a `.git/hooks/post-update` script checked into the repository. Typical use of Mercurial prevents construction of such repositories, but they can be created programmatically.

 https://cve.radiocsirt.org/vuln/gsd-2017-17458 gsd-2017-17458 2026-10-03T11:48:44.638546+00:00 gsd-2017-17458 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10586-1 openSUSE-SU-2024:10586-1 — mercurial-5.9.1-2.1 on GA media 2026-10-03T11:48:44.638558+00:00

mercurial-5.9.1-2.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2017-90 PYSEC-2017-90 2026-10-03T11:48:44.638582+00:00

Affected: PyPI: mercurial

In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause Git subrepositories to run arbitrary code in the form of a .git/hooks/post-update script checked into the repository. Typical use of Mercurial prevents construction of such repositories, but they can be created programmatically.

 https://cve.radiocsirt.org/vuln/suse-su-2018:0127-1 SUSE-SU-2018:0127-1 — Security update for mercurial 2026-10-03T11:48:44.638633+00:00

Security update for mercurial

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-17458 UBUNTU-CVE-2017-17458 2026-10-03T11:48:44.638664+00:00

Affected: Ubuntu:14.04:LTS: mercurial, Ubuntu:16.04:LTS: mercurial

In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause Git subrepositories to run arbitrary code in the form of a .git/hooks/post-update script checked into the repository. Typical use of Mercurial prevents construction of such repositories, but they can be created programmatically.