Security Advisory
CVE-2017-1000116
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Mercurial prior to 4.3 did not adequately sanitize hostnames passed to ssh, leading to possible shell-injection attacks.