CVE-2017-17458

It was found that mercurial was vulnerable to cross repositories modification. A specially crafted mercurial repository could trigger arbitrary commands on a client during commands such as clone or update. Mitigation Disable sub-repositories...