CVE-2021-21289

CVE-2021-21289 affects Mechanize (Ruby library) from v2.0.0 up to v2.7.7, where a command-injection vulnerability exists. The flaw arises because several methods (CookieJar#load, CookieJar#save_as, Mechanize#download, Mechanize::Download#save, Mechanize::File#save, Mechanize::FileResponse#read_bo...

CVE-2022-31033

CVE-2022-31033 affects the Ruby gem Mechanize. In versions prior to 2.8.5, the Authorization header may be leaked after a redirect to a different port on the same site, exposing sensitive credentials. The issue is mitigated by upgrading to Mechanize v2.8.5 or later. Public sources in the provided...

CVE-2021-32837

CVE-2021-32837 affects python-mechanize; the ReDoS vulnerability is in the regular expression handling and is triggered before the patch. Multiple connected advisories confirm a fix in newer releases (e.g., 0.4.6 and later such as 0.4.8 in openSUSE updates). Affected component: mechanize (Python ...