pkg:RubyGems/net-imap

All known vulnerabilities

• CRITICAL9.8CVE-2026-42257net-imap vulnerable to command Injection via "raw" arguments to multiple commands
  >= 0.6.0, < 0.6.4
• CRITICAL9.8CVE-2026-42258net-imap vulnerable to command Injection via unvalidated Symbol inputs
  >= 0.6.0, < 0.6.4
• HIGH7.5CVE-2026-42245net-imap has quadratic complexity when reading response literals
  >= 0.6.0, < 0.6.4
• HIGH7.4net-imap vulnerable to STARTTLS stripping via invalid response timing
  >= 0.6.0, < 0.6.4
• MEDIUM6.5net-imap vulnerable to denial of service via high iteration count for `SCRAM-*` authentication
  >= 0.6.0, < 0.6.4
• MEDIUM6.5net-imap rubygem vulnerable to possible DoS by memory exhaustion
  >= 0.5.0, < 0.5.7
• MEDIUM6.5Possible DoS by memory exhaustion in net-imap
  >= 0.3.2, < 0.3.8
• —Net::IMAP: Command Injection via ID command argument
  >= 0.6.0, < 0.6.4.1
• —Net::IMAP: Denial of Service via incomplete raw argument validation
  >= 0.6.0, < 0.6.4.1
• —Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument
  >= 0.6.0, < 0.6.4.1