https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:40:16.184097+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-01310 bdu:2021-01310 2026-10-03T05:40:16.190959+00:00 bdu:2021-01310 https://cve.radiocsirt.org/vuln/euvd-2026-66378 EUVD-2026-66378 2026-10-03T05:40:16.190992+00:00 EUVD-2026-66378 https://cve.radiocsirt.org/vuln/fkie_cve-2018-13348 fkie_cve-2018-13348 2026-10-03T05:40:16.191006+00:00

The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001.

 https://cve.radiocsirt.org/vuln/ghsa-3v62-ww8w-758m GHSA-3v62-ww8w-758m — Mercurial Improper Input Validation vulnerability 2026-10-03T05:40:16.191033+00:00

Affected: PyPI: mercurial

The `mpatch_decode` function in `mpatch.c` in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001.

 https://cve.radiocsirt.org/vuln/gsd-2018-13348 gsd-2018-13348 2026-10-03T05:40:16.191055+00:00 gsd-2018-13348 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10586-1 openSUSE-SU-2024:10586-1 — mercurial-5.9.1-2.1 on GA media 2026-10-03T05:40:16.191066+00:00

mercurial-5.9.1-2.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2018-90 PYSEC-2018-90 2026-10-03T05:40:16.191084+00:00

Affected: PyPI: mercurial

The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001.

 https://cve.radiocsirt.org/vuln/suse-su-2018:1990-1 SUSE-SU-2018:1990-1 — Security update for mercurial 2026-10-03T05:40:16.191101+00:00

Security update for mercurial

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-13348 UBUNTU-CVE-2018-13348 2026-10-03T05:40:16.191116+00:00

Affected: Ubuntu:14.04:LTS: mercurial, Ubuntu:16.04:LTS: mercurial, Ubuntu:18.04:LTS: mercurial

The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001.