| Package | Affected versions | Patched versions |
|---|---|---|
| mercurial | < 3.8< 3.8-rc | 3.83.8-rc |
| mercurial | ≤ 3.7.3 |
The convert extension in Mercurial before 3.8 might allow context-dependent attackers to execute arbitrary code via a crafted git repository name.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free