Tag

mercurial

Safeguard articles tagged "mercurial" — guides, analysis, and best practices for software supply chain and application security.

1 article

Security

CVE-2023-5752: Command Injection in pip via Mercurial Revisions

Installing a package from a Mercurial URL with a crafted revision let attackers inject hg config options. Here is how CVE-2023-5752 works and how to fix it.

Dec 8, 20255 min read