Read the docs

Mechanize Project

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Mechanize Project records in CISA KEV

No Mechanize Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mechanize 3 records HIGH

Records

3 records in Mechanize · all components

TI-2021-12502 CVE-2021-32837 · GHSA-g3pv-pj5f-3hfq

mechanize vulnerable to ReDoS

Priority HIGH 72

mechanize, a library for automatically interacting with HTTP web servers, contains a regular expression that is vulnerable to regular expression denial of service (ReDoS) prior to version 0.4.6.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.28661 Published 2023-01-17 Fixed in 0.4.6 CWE-1333
TI-2021-04389 CVE-2021-21289 · GHSA-qrqm-fpv6-6r8g

Command Injection Vulnerability in Mechanize

Priority MEDIUM 42

Mechanize is an open-source ruby library that makes automated web interaction easy.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.03549 Published 2021-02-02 Partial fix · 2.7.7 CWE-78
TI-2022-13078 CVE-2022-31033 · GHSA-64qm-hrgp-pgr9

Authorization header leak in rubygem Mechanize

Priority LOW 36

The Mechanize library is used for automating interaction with websites.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01523 Published 2022-06-09 Fixed in 2.8.5 CWE-200
Open these records in search →