MEDIUMRubyGems
GHSA-46q3-7gv7-qmgg· CVE-2026-47242Net::IMAP: Command Injection via ID command argument
Modified: 9/10/2026
package
RubyGems/net-imap
pkg:rubygems/net-imap
MEDIUM5.3RubyGems
GHSA-75xq-5h9v-w6px· CVE-2026-42258net-imap vulnerable to command Injection via unvalidated Symbol inputs
Modified: 9/10/2026
MEDIUM6.5RubyGems
GHSA-7fc5-f82f-cx69· CVE-2025-25186Possible DoS by memory exhaustion in net-imap
Modified: 9/10/2026
MEDIUMRubyGems
GHSA-87pf-fpwv-p7m7· CVE-2026-42256net-imap vulnerable to denial of service via high iteration count for `SCRAM-*` authentication
Modified: 9/10/2026
MEDIUMRubyGems
GHSA-8p34-64r3-mwg8· CVE-2026-47240Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument
Modified: 9/10/2026
LOWRubyGems
GHSA-c4fp-cxrr-mj66· CVE-2026-47241Net::IMAP: Denial of Service via incomplete raw argument validation
Modified: 9/10/2026
MEDIUMRubyGems
GHSA-hm49-wcqc-g2xg· CVE-2026-42257net-imap vulnerable to command Injection via "raw" arguments to multiple commands
Modified: 9/10/2026
MEDIUMRubyGems
GHSA-j3g3-5qv5-52mj· CVE-2025-43857net-imap rubygem vulnerable to possible DoS by memory exhaustion
Modified: 9/10/2026
LOWRubyGems
GHSA-q2mw-fvj9-vvcw· CVE-2026-42245net-imap has quadratic complexity when reading response literals
Modified: 9/10/2026
HIGHRubyGems
GHSA-vcgp-9326-pqcp· CVE-2026-42246net-imap vulnerable to STARTTLS stripping via invalid response timing
Modified: 9/10/2026