Product by Ruby

    Net\

    6 known vulnerabilities in Net\ (Ruby), 0 of them actively exploited (CISA KEV).

    Key figures

    6

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Net\ (Ruby)
    CriticalCVE-2026-42257

    net-imap: Command Injection via "raw" arguments to multiple commands

    also in 3 other products

    		9.8
    HighCVE-2026-42258

    net-imap: Command Injection via unvalidated Symbol inputs

    also in 4 other products

    		5.3
    HighCVE-2026-42245

    net-imap: Quadratic complexity when reading response literals

    also in 4 other products

    		7.5
    HighCVE-2026-42246

    net-imap vulnerable to STARTTLS stripping via invalid response timing

    also in 4 other products

    		7.4
    MediumCVE-2025-43857

    net-imap rubygem vulnerable to possible DoS by memory exhaustion

    also in 1 other product

    		6.5
    MediumCVE-2026-42256

    net-imap: Denial of service via high iteration count for `SCRAM-*` authentication

    also in 3 other products

    		6.5

    All products by Ruby