ruby net-imap vulnerabilities

CVEs per yearBy the year they were published

1. 20252
2. 20268

Newest CVEs

• CVE-2026-47242

  Net::IMAP: Command Injection via ID command argument

  ruby · net-imap

  Medium5.8
• CVE-2026-47240

  Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument

  ruby · net-imap

  Medium5.8
• CVE-2026-47241

  Net::IMAP: Denial of Service via incomplete raw argument validation

  ruby · net-imap

  Low2.1
• CVE-2026-42258

  net-imap: Command Injection via unvalidated Symbol inputs

  ruby · net-imap

  Medium5.8
• CVE-2026-42257

  net-imap: Command Injection via "raw" arguments to multiple commands

  ruby · net-imap

  Medium5.8
• CVE-2026-42256

  net-imap: Denial of service via high iteration count for `SCRAM-*` authentication

  ruby · net-imap

  Medium6.0
• CVE-2026-42245

  net-imap: Quadratic complexity when reading response literals

  ruby · net-imap

  Low2.3
• CVE-2026-42246

  net-imap vulnerable to STARTTLS stripping via invalid response timing

  ruby · net-imap

  High7.6
• CVE-2025-43857

  net-imap rubygem vulnerable to possible DoS by memory exhaustion

  ruby · net-imap

  Medium6.0
• CVE-2025-25186

  Net::IMAP vulnerable to possible DoS by memory exhaustion

  ruby · net-imap

  Medium6.5