Vulnerabilities

TI-2026-30574 CVE-2026-42258 · GHSA-75xq-5h9v-w6px

net-imap: Command Injection via unvalidated Symbol inputs

LOW 27

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.

CVSS 4.0MEDIUM 5.8 Local No auth User interaction EPSS 0.00783 Published 2026-05-09 Partial fix · 0.4.24, 0.5.14 +1 CWE-77

TI-2026-30573 CVE-2026-42257 · GHSA-hm49-wcqc-g2xg

LOW 26

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.

CVSS 4.0MEDIUM 5.8 Local No auth User interaction EPSS 0.00429 Published 2026-05-09 Partial fix · 0.4.24, 0.5.14 +1 CWE-77

TI-2026-30572 CVE-2026-42256 · GHSA-87pf-fpwv-p7m7

LOW 27

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.00299 Published 2026-05-09 Partial fix · 0.4.24, 0.5.14 +1 CWE-1322

TI-2026-30562 CVE-2026-42245 · GHSA-q2mw-fvj9-vvcw

LOW 12

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.0041 Published 2026-05-09 Fixed in 0.4.24, 0.5.14 +1 CWE-407

TI-2026-30563 CVE-2026-42246 · GHSA-vcgp-9326-pqcp

LOW 35

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00312 Published 2026-05-09 Partial fix · 0.3.10, 0.4.24 +2 CWE-392

TI-2025-28441 CVE-2025-43857 · GHSA-j3g3-5qv5-52mj

LOW 27

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.00494 Published 2025-04-28 Partial fix · 0.5.7, 0.4.20 +2 CWE-400