Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Mechanize Project Clear all filters
TI-2021-12502 CVE-2021-32837 · GHSA-g3pv-pj5f-3hfq

mechanize vulnerable to ReDoS

Priority HIGH 72

mechanize, a library for automatically interacting with HTTP web servers, contains a regular expression that is vulnerable to regular expression denial of service (ReDoS) prior to version 0.4.6.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.28661 Published 2023-01-17 Fixed in 0.4.6 CWE-1333
TI-2022-13078 CVE-2022-31033 · GHSA-64qm-hrgp-pgr9

Authorization header leak in rubygem Mechanize

Priority LOW 36

The Mechanize library is used for automating interaction with websites.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01523 Published 2022-06-09 Fixed in 2.8.5 CWE-200
TI-2021-04389 CVE-2021-21289 · GHSA-qrqm-fpv6-6r8g

Command Injection Vulnerability in Mechanize

Priority MEDIUM 42

Mechanize is an open-source ruby library that makes automated web interaction easy.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.03549 Published 2021-02-02 Partial fix · 2.7.7 CWE-78