TI-2025-18855 CVE-2025-25186 · GHSA-7fc5-f82f-cx69
Net::IMAP vulnerable to possible DoS by memory exhaustion
Priority MEDIUM 62
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.
RHSA-2025:10217
ruby:3.3 security update
Released 2025-07-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) ruby-3.3.8-4.module+el8.10.0+23024+a87ba659.aarch64::ruby:3.3, ruby-3.3.8-4.module+el8.10.0+23024+a87ba659.i686::ruby:3.3, ruby-3.3.8-4.module+el8.10.0+23024+a87ba659.ppc64le::ruby:3.3 +47
Fixes 3 records
TI-2025-20076 CVE-2025-27219 · GHSA-gh9q-2xrm-x6qv
Resource allocation without limits in ruby CGI
Priority LOW 34
In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability.
TI-2025-20078 CVE-2025-27221 · GHSA-22h5-pq3x-2gf2
Information disclosure in ruby URI
Priority LOW 25
In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication credentials because userinfo is retained even after changing the host.