| Package | Affected versions | Patched versions |
|---|---|---|
| mercurial | < 4.4.1 | 4.4.1 |
| mercurial | < 4.4.1 | 4.4.1 |
In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause Git subrepositories to run arbitrary code in the form of a .git/hooks/post-update script checked into the repository. Typical use of Mercurial prevents construction of such repositories, but they can be created programmatically.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free