{"action":"Upgrade mechanize to 0.4.6 or later.","affected":[{"fixed":"0.4.6","introduced":"0"}],"component":"mechanize","cve_ids":["CVE-2021-32837"],"ecosystem":"PyPI","epss":0.28872,"exploited":false,"fixed_versions":["0.4.6"],"ghsa_id":"GHSA-g3pv-pj5f-3hfq","id":"tcs_01M5KFGN0HWRMMRXNXGDR498K4","modified_at":"2025-12-22T16:59:04.476381Z","published_at":"2023-01-18T00:30:18Z","references":["https://osv.dev/vulnerability/GHSA-g3pv-pj5f-3hfq","https://nvd.nist.gov/vuln/detail/CVE-2021-32837","https://github.com/python-mechanize/mechanize/commit/dd05334448e9f39814bab044d2eaa5ef69b410d6","https://github.com/pypa/advisory-database/tree/main/vulns/mechanize/PYSEC-2023-25.yaml","https://github.com/python-mechanize/mechanize","https://github.com/python-mechanize/mechanize/blob/3acb1836f3fd8edc5a758a417dd46b53832ae3b5/mechanize/_urllib2_fork.py#L878-L879","https://github.com/python-mechanize/mechanize/releases/tag/v0.4.6","https://lists.debian.org/debian-lts-announce/2023/06/msg00022.html","https://lists.debian.org/debian-lts-announce/2025/12/msg00028.html","https://securitylab.github.com/advisories/GHSL-2021-108-python-mechanize-mechanize"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-g3pv-pj5f-3hfq","url":"https://osv.dev/vulnerability/GHSA-g3pv-pj5f-3hfq"}],"summary":"mechanize Regular Expression Denial of Service vulnerability"}