Product by Ruby

    Net-imap

    10 known vulnerabilities in Net-imap (Ruby), 0 of them actively exploited (CISA KEV).

    Key figures

    10

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Net-imap (Ruby)
    CriticalCVE-2026-42257

    net-imap: Command Injection via "raw" arguments to multiple commands

    also in 3 other products

    		9.8
    MediumCVE-2026-47240

    Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument

    also in 1 other product

    		—
    HighCVE-2026-42258

    net-imap: Command Injection via unvalidated Symbol inputs

    also in 4 other products

    		5.3
    HighCVE-2026-42245

    net-imap: Quadratic complexity when reading response literals

    also in 4 other products

    		7.5
    MediumCVE-2025-25186

    Net::IMAP vulnerable to possible DoS by memory exhaustion

    		6.5
    HighCVE-2026-42246

    net-imap vulnerable to STARTTLS stripping via invalid response timing

    also in 4 other products

    		7.4
    MediumCVE-2025-43857

    net-imap rubygem vulnerable to possible DoS by memory exhaustion

    also in 1 other product

    		6.5
    MediumCVE-2026-42256

    net-imap: Denial of service via high iteration count for `SCRAM-*` authentication

    also in 3 other products

    		6.5
    MediumCVE-2026-47242

    Net::IMAP: Command Injection via ID command argument

    also in 1 other product

    		—
    LowCVE-2026-47241

    Net::IMAP: Denial of Service via incomplete raw argument validation

    also in 1 other product

    		—

    All products by Ruby