CVE-2008-2942: Mercurial

Medium severity, CVSS 6.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Directory traversal vulnerability in patch.py in Mercurial 1.0.1 allows user-assisted attackers to modify arbitrary files via ".." (dot dot) sequences in a patch file.

Affected products

• Mercurial Mercurial: version 1.0.1 only

Published 2008-06-30. Last modified 2026-06-16.