https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T06:27:50.905829+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2017-01771 bdu:2017-01771 2026-10-09T06:27:50.915055+00:00 bdu:2017-01771 https://cve.radiocsirt.org/vuln/certfr-2017-avi-231 certfr-2017-avi-231 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Oracle VM Server pour x86 et Oracle Linux</span… 2026-10-09T06:27:50.915092+00:00 certfr-2017-avi-231 https://cve.radiocsirt.org/vuln/cnvd-2017-11319 cnvd-2017-11319 2026-10-09T06:27:50.915112+00:00 cnvd-2017-11319 https://cve.radiocsirt.org/vuln/euvd-2026-75859 EUVD-2026-75859 2026-10-09T06:27:50.915125+00:00 EUVD-2026-75859 https://cve.radiocsirt.org/vuln/fkie_cve-2017-9462 fkie_cve-2017-9462 2026-10-09T06:27:50.915135+00:00

In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and consequently execute arbitrary code, by using --debugger as a repository name.

 https://cve.radiocsirt.org/vuln/ghsa-ghjx-3jg5-h6r2 GHSA-ghjx-3jg5-h6r2 — Mercurial has Incorrect Permission Assignment for Critical Resource 2026-10-09T06:27:50.915162+00:00

Affected: PyPI: mercurial

In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and consequently execute arbitrary code, by using --debugger as a repository name.

 https://cve.radiocsirt.org/vuln/gsd-2017-9462 gsd-2017-9462 2026-10-09T06:27:50.915184+00:00 gsd-2017-9462 https://cve.radiocsirt.org/vuln/pysec-2017-91 PYSEC-2017-91 2026-10-09T06:27:50.915195+00:00

Affected: PyPI: mercurial

In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and consequently execute arbitrary code, by using --debugger as a repository name.

 https://cve.radiocsirt.org/vuln/rhsa-2017:1576 RHSA-2017:1576 — Red Hat Security Advisory: mercurial security update 2026-10-09T06:27:50.915226+00:00

mercurial: Python debugger accessible to authorized users

 https://cve.radiocsirt.org/vuln/suse-su-2017:1558-1 SUSE-SU-2017:1558-1 — Security update for mercurial 2026-10-09T06:27:50.915245+00:00

Security update for mercurial

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-9462 UBUNTU-CVE-2017-9462 2026-10-09T06:27:50.915259+00:00

Affected: Ubuntu:14.04:LTS: mercurial, Ubuntu:16.04:LTS: mercurial

In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and consequently execute arbitrary code, by using --debugger as a repository name.