Known vulnerabilities in mercurial (Alpine package)

Software CPE: cpe:2.3:o:alpine:mercurial_alpine_package:*:*:*:*:*:alpine_linux:*:*
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting mercurial (Alpine package) mercurial (Alpine package) is affected by 8 known vulnerabilities: 5 high, 2 medium, 1 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU29241 - UNIX Symbolic Link (Symlink) Following
CVE-2019-3902
CWE-61 Medium
No
No
4.5.2-r1 25.06.2020 SB2019042209
SB2020062621
SB2020063018
and 4 more
#VU11150 - Improper Access Control
CVE-2018-1000132
CWE-284 Low
No
No
4.5.2-r0 19.03.2018 SB2018031911
SB2019080615
SB2018073046
#VU31407 - Improper Link Resolution Before File Access ('Link Following')
CVE-2017-1000115
CWE-59 Medium
No
No
4.3.1-r0 05.10.2017 SB2017100520
SB2017081822
SB2017081210
and 6 more
#VU31408 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2017-1000116
CWE-78 High
No
No
4.3.1-r0 05.10.2017 SB2017100520
SB2017081823
SB2017081210
and 6 more
#VU32285 - Improper Access Control
CVE-2016-3105
CWE-284 High
No
No
3.4-r3 09.05.2016 SB2016050902
SB2016051614
SB2016051615
and 1 more
#VU32286 - Data Handling
CVE-2016-3630
CWE-19 High
No
No
3.0-r1 13.04.2016 SB2016041311
SB2016041914
SB2016041915
#VU32287 - Improper input validation
CVE-2016-3068
CWE-20 High
No
No
3.0-r1 13.04.2016 SB2016041312
SB2016041912
SB2016041913
#VU32315 - Improper input validation
CVE-2015-7545
CWE-20 High
No
No
3.4-r1 13.04.2016 SB2016041315
SB2016010702
SB2016010703
and 7 more