2019-04-22 18:29:01 2019-04-29 19:04:38

A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and write files outside a repository.