Lucene search

K
githubGitHub Advisory DatabaseGHSA-9XV4-R2HF-26GH
HistoryMay 13, 2022 - 1:24 a.m.

Mercurial Improper Input Validation vulnerability

2022-05-1301:24:55
CWE-20
GitHub Advisory Database
github.com
2

7.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.4%

The mpatch_apply function in mpatch.c in Mercurial before 4.6.1 incorrectly proceeds in cases where the fragment start is past the end of the original data, aka OVE-20180430-0004.

CPENameOperatorVersion
mercuriallt4.6.1