Vulnerabilities in mercurial

2 results
CVE-2010-4237—Mercurial before 1.6.4 fails to verify the Common Name field of SSL certificates which allows remote attackers who acquire a certificate sigEPSS 0.8%CVE-2025-2361MEDIUMMercurial SCM Web Interface cross site scriptingEPSS 0.5%