TI-2026-30563 CVE-2026-42246 · GHSA-vcgp-9326-pqcp
net-imap vulnerable to STARTTLS stripping via invalid response timing
Priority LOW 35
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.
ruby
Records136All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical18CVSS 9.0–10.0
CVSS high49CVSS 7.0–8.9
Exploited now
ruby records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsRecords
6 records in Net · all components
TI-2026-30574 CVE-2026-42258 · GHSA-75xq-5h9v-w6px
net-imap: Command Injection via unvalidated Symbol inputs
Priority LOW 27
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.
TI-2026-30572 CVE-2026-42256 · GHSA-87pf-fpwv-p7m7
net-imap: Denial of service via high iteration count for `SCRAM-*` authentication
Priority LOW 27
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.
TI-2025-28441 CVE-2025-43857 · GHSA-j3g3-5qv5-52mj
net-imap rubygem vulnerable to possible DoS by memory exhaustion
Priority LOW 27
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.
TI-2026-30573 CVE-2026-42257 · GHSA-hm49-wcqc-g2xg
net-imap: Command Injection via "raw" arguments to multiple commands
Priority LOW 26
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.
TI-2026-30562 CVE-2026-42245 · GHSA-q2mw-fvj9-vvcw
net-imap: Quadratic complexity when reading response literals
Priority LOW 12
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.