CVE-2016-3105

The convert extension in Mercurial before 3.8 might allow context-dependent attackers to execute arbitrary code via a crafted git repository name.

Date published : 2016-05-09

http://www.securityfocus.com/bid/90536

https://selenic.com/hg/rev/a56296f55a5e