[ Vendor · 3 CVEs ]
sparklemotion
CVEs affecting sparklemotion published in the last 30 days, plus any sparklemotion CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-107714 | 8 Oct 2026 | CVSS 5.9 | sparklemotion mechanizeThe Mechanize library is used for automating interaction with websites. Prior to 2.14.1, Mechanize::HTTP::Agent#response_redirect treats redirects as… | |
| CVE-2026-107715 | 8 Oct 2026 | CVSS 6.8 | Mechanize sends credential headers to another host after an HTTP redirectThe Mechanize library is used for automating interaction with websites. Prior to 2.14.1, Mechanize sends caller-supplied credential headers to a… | Fix |
| CVE-2026-107399 | 8 Oct 2026 | CVSS 6.8 | Mechanize sends credential headers to another origin after a meta refreshThe Mechanize library is used for automating interaction with websites. Prior to 2.14.1, Mechanize applies no origin trust boundary in… | Fix |