Skip to content
OpenAdvisories
High DLA-2561-1 1 CVE

ruby-mechanize - security update

Published Feb 17, 2021 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 ruby-mechanize 2.7.5-1+deb9u1

Vulnerabilities 1

  • High 7.4
    CVE-2021-21289

    Command Injection Vulnerability in Mechanize

    Mechanize is an open-source ruby library that makes automated web interaction easy. In Mechanize from version 2.0.0 and before version 2.7.7 there is a command injection vulnerability. Affected versions of mechanize allow for OS commands to be injected using …

    sparklemotion mechanize ruby-mechanize ruby-mechanize Debian Ubuntu RubyGems