TI-2025-18855 CVE-2025-25186 · GHSA-7fc5-f82f-cx69
Net::IMAP vulnerable to possible DoS by memory exhaustion
Priority MEDIUM 62
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.
RHSA-2025:8131
ruby security update
Released 2025-05-26 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) ruby-3.3.8-10.el10_0, ruby-bundled-gems-3.3.8-10.el10_0, ruby-default-gems-3.3.8-10.el10_0 +20
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) ruby-doc-3.3.8-10.el10_0
Fixes 3 records
TI-2025-20076 CVE-2025-27219 · GHSA-gh9q-2xrm-x6qv
Resource allocation without limits in ruby CGI
Priority LOW 34
In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability.
TI-2025-20078 CVE-2025-27221 · GHSA-22h5-pq3x-2gf2
Information disclosure in ruby URI
Priority LOW 25
In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication credentials because userinfo is retained even after changing the host.