MEDIUM RubyGems
GHSA-46q3-7gv7-qmgg · CVE-2026-47242 Net::IMAP: Command Injection via ID command argument
Modified: 6/10/2026
package
RubyGems / net-imap
pkg:rubygems/net-imap
MEDIUM RubyGems
GHSA-75xq-5h9v-w6px · CVE-2026-42258 net-imap vulnerable to command Injection via unvalidated Symbol inputs
Modified: 5/14/2026
MEDIUM 6.5 RubyGems
GHSA-7fc5-f82f-cx69 · CVE-2025-25186 Possible DoS by memory exhaustion in net-imap
Modified: 2/4/2026
MEDIUM RubyGems
GHSA-87pf-fpwv-p7m7 · CVE-2026-42256 net-imap vulnerable to denial of service via high iteration count for `SCRAM-*` authentication
Modified: 5/14/2026
MEDIUM RubyGems
GHSA-8p34-64r3-mwg8 · CVE-2026-47240 Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument
Modified: 6/10/2026
LOW RubyGems
GHSA-c4fp-cxrr-mj66 · CVE-2026-47241 Net::IMAP: Denial of Service via incomplete raw argument validation
Modified: 6/10/2026
MEDIUM RubyGems
GHSA-hm49-wcqc-g2xg · CVE-2026-42257 net-imap vulnerable to command Injection via "raw" arguments to multiple commands
Modified: 6/17/2026
MEDIUM RubyGems
GHSA-j3g3-5qv5-52mj · CVE-2025-43857 net-imap rubygem vulnerable to possible DoS by memory exhaustion
Modified: 2/4/2026
LOW RubyGems
GHSA-q2mw-fvj9-vvcw · CVE-2026-42245 net-imap has quadratic complexity when reading response literals
Modified: 5/14/2026
HIGH RubyGems
GHSA-vcgp-9326-pqcp · CVE-2026-42246 net-imap vulnerable to STARTTLS stripping via invalid response timing
Modified: 5/14/2026