PYSEC-2019-188 PUBLISHED

A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and write files outside a repository.

Affected Products

VendorProductVersions
PyPImercurial4.6rc1, 0, 0.9

Timeline

References

Open in Interactive Console →