https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:37:21.530528+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2017-17458 CVE-2017-17458 2026-10-03T16:37:21.533220+00:00

In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause Git subrepositories to run arbitrary code in the form of a .git/hooks/post-update script checked into the repository. Typical use of Mercurial prevents construction of such repositories, but they can be created programmatically.

 https://cve.radiocsirt.org/vuln/ghsa-6v56-cpg6-3rpx GHSA-6v56-cpg6-3rpx — Mercurial vulnerable to arbitrary code injection 2026-10-03T16:37:21.533290+00:00

Affected: PyPI: mercurial

In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause Git subrepositories to run arbitrary code in the form of a `.git/hooks/post-update` script checked into the repository. Typical use of Mercurial prevents construction of such repositories, but they can be created programmatically.