Python-Mechanize Mechanize vulnerabilities

1 known vulnerability affecting python-mechanize/mechanize.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2021-32837HIGHCVSS 7.5≥ 0.4.6, < 0.4.62023-01-17

CVE-2021-32837 [HIGH] CWE-1333 CVE-2021-32837: mechanize, a library for automatically interacting with HTTP web servers, contains a regular express mechanize, a library for automatically interacting with HTTP web servers, contains a regular expression that is vulnerable to regular expression denial of service (ReDoS) prior to version 0.4.6. If a web server responds in a malicious way, then mechanize could crash. Version 0.4.6 has a patch for the issue.