What’s Vulnerable › Products

ruby-lang Net::Imap vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your ruby-lang Net::Imap version is affected

Latest ruby-lang Net::Imap vulnerabilities

• CVE-2026-42258 — net-imap: Command Injection via unvalidated Symbol inputs (CVSS 5.3)
• CVE-2026-42257 — net-imap: Command Injection via "raw" arguments to multiple commands (CVSS 9.8)
• CVE-2026-42256 — net-imap: Denial of service via high iteration count for `SCRAM-*` authentication (CVSS 6.5)
• CVE-2026-42246 — net-imap vulnerable to STARTTLS stripping via invalid response timing (CVSS 7.4)
• CVE-2026-42245 — net-imap: Quadratic complexity when reading response literals (CVSS 7.5)
• CVE-2025-43857 — net-imap rubygem vulnerable to possible DoS by memory exhaustion (CVSS 6.5)