Skip to content
OpenAdvisories
High DLA-4418-1 1 CVE

python-mechanize - security update

Published Dec 22, 2025 · Updated Dec 22, 2025

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 python-mechanize 1:0.4.5-2+deb11u1

Vulnerabilities 1

  • High 7.5
    CVE-2021-32837 EPSS 29%

    mechanize vulnerable to ReDoS

    mechanize, a library for automatically interacting with HTTP web servers, contains a regular expression that is vulnerable to regular expression denial of service (ReDoS) prior to version 0.4.6. If a web server responds in a malicious way, then mechanize coul…

    python-mechanize mechanize python-mechanize mechanize Debian Ubuntu PyPI