- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 10 · 1 high, 7 medium, 2 low
- Registry
- RubyGems
Advisories 10
- CVE-2026-47242Medium 5.8
Net::IMAP: Command Injection via ID command argument
Affected: from 0.6.0, fixed in 0.6.4.1; fixed in 0.5.15.
- CVE-2026-47240Medium 5.8
Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument
Affected: from 0.6.0, fixed in 0.6.4.1; fixed in 0.5.15.
- CVE-2026-47241Low 2.1
Net::IMAP: Denial of Service via incomplete raw argument validation
Affected: from 0.6.0, fixed in 0.6.4.1; fixed in 0.5.15.
- CVE-2026-42258Medium 5.8
net-imap: Command Injection via unvalidated Symbol inputs
Affected: from 0.6.0, fixed in 0.6.4; from 0.5.0, fixed in 0.5.14; fixed in 0.4.24.
- CVE-2026-42257Medium 5.8
net-imap: Command Injection via "raw" arguments to multiple commands
Affected: from 0.6.0, fixed in 0.6.4; from 0.5.0, fixed in 0.5.14; fixed in 0.4.24.
- CVE-2026-42256Medium 6.0
net-imap: Denial of service via high iteration count for `SCRAM-*` authentication
Affected: from 0.6.0, fixed in 0.6.4; from 0.5.0, fixed in 0.5.14; from 0.4.0, fixed in 0.4.24.
- CVE-2026-42245Low 2.3
net-imap: Quadratic complexity when reading response literals
Affected: from 0.6.0, fixed in 0.6.4; from 0.5.0, fixed in 0.5.14; fixed in 0.4.24.
- CVE-2026-42246High 7.6
net-imap vulnerable to STARTTLS stripping via invalid response timing
Affected: from 0.6.0, fixed in 0.6.4; from 0.5.0, fixed in 0.5.14; from 0.4.0, fixed in 0.4.24; fixed in 0.3.10.
- CVE-2025-43857Medium 6.0
net-imap rubygem vulnerable to possible DoS by memory exhaustion
Affected: from 0.5.0, fixed in 0.5.7; from 0.4.0, fixed in 0.4.20; from 0.3.0, fixed in 0.3.9; fixed in 0.2.5.
- CVE-2025-25186Medium 6.5
Net::IMAP vulnerable to possible DoS by memory exhaustion
Affected: from 0.3.2, fixed in 0.3.8; from 0.4.0, fixed in 0.4.19; from 0.5.0, fixed in 0.5.6.