3 known security vulnerabilities
- moderateGHSA-2mwr-xjcg-37j7(CVE-2026-107715)
Mechanize sends credential headers to another host after an HTTP redirect
Show 2 more vulnerabilitiesShow fewer vulnerabilities2 moderate
- moderateGHSA-64qm-hrgp-pgr9(CVE-2022-31033)
Mechanize before v2.8.5 vulnerable to authorization header leak on port redirect
- moderateGHSA-c6rp-p8xm-4q9f(CVE-2026-107399)
Mechanize sends credential headers to another origin after a meta refresh
The Mechanize library is used for automating interaction with websites. Mechanize automatically stores and sends cookies, follows redirects, can follow links, and submit forms. Form fields can be populated and submitted. Mechanize also keeps track of the sites that you have visited as a history.
Required Ruby Version
None
Authors
Aaron Patterson, Mike Dalessio
Versions
-
2.14.1
-
source
- 2.14.1 source August 23, 2026 (146 KB)
-
-
2.14.0
-
source
- 2.14.0 source January 05, 2025 (143 KB) vulnerable
-
-
2.13.0
-
source
- 2.13.0 source January 02, 2025 (143 KB) vulnerable
-
-
2.12.2
-
source
- 2.12.2 source October 02, 2024 (143 KB) vulnerable
-
-
2.12.1
-
source
- 2.12.1 source August 21, 2024 (143 KB) vulnerable
-
-
1.0.0
-
source
- 1.0.0 source February 08, 2010 (83.5 KB) vulnerable
-