Every CVE Search/ Get API key

CVE-2026-42246

net-imap vulnerable to STARTTLS stripping via invalid response timing

7.6 HighFix available

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can cause Net::IMAP#starttls to return "successfully", without starting TLS. This issue has been patched in versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Passive

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
None

Exploit likelihood

0.31%Up 0.3 points since May 10, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.6

net-imap vulnerable to STARTTLS stripping via invalid response timing

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can cause Net::IMAP#starttls to return "successfully", without starting TLS. This issue has been patched in versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4.

Record
CVE-2026-42246
CVSS 4.0
7.6 HighCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness
CWE-392, CWE-393, CWE-754, CWE-636, CWE-841, CWE-325
Updated
2026-11-02
EUVDEUVD-2026-28924 7.6

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can cause Net::IMAP#starttls to return "successfully", without starting TLS. This issue has been patched in versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4.

Record
EUVD-2026-28924
CVSS 4.0
7.6 HighCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-vcgp-9326-pqcp 7.6

net-imap vulnerable to STARTTLS stripping via invalid response timing

Summary

A man-in-the-middle attacker can cause Net::IMAP#starttls to return "successfully", without starting TLS.

Details

When using Net::IMAP#starttls to upgrade a plaintext connection to use TLS, a man-in-the-middle attacker can inject a tagged OK response with an easily predictable tag. By sending the response before the client finishes sending the command, the command completes "successfully" before the response handler is registered. This allows #starttls to return without error, but the response handler is never invoked, the TLS connection is never established, and the socket remains unencrypted.

This allows man-in-the-middle attackers to perform a STARTTLS stripping attack, unless the client code explicitly checks Net::IMAP#tls_verified?.

Impact

TLS bypass, leading to cleartext transmission of sensitive information.

Mitigation

  • Upgrade to a patched version of net-imap that raises an exception whenever #starttls does not establish TLS.
  • Connect to an implicit TLS port, rather than use STARTTLS with a cleartext port. This is strongly recommended anyway:
    • RFC 8314: Cleartext Considered Obsolete: Use of Transport Layer Security (TLS) for Email Submission and Access
    • NO STARTTLS: Why TLS is better without STARTTLS, A Security Analysis of STARTTLS in the Email Context
  • Explicitly verify Net::IMAP#tls_verified? is true, before using the connection after #starttls.
Record
GHSA-vcgp-9326-pqcp
CVSS 4.0
7.6 HighCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Weakness
CWE-392, CWE-393, CWE-636, CWE-754, CWE-841
Updated
2026-11-02
NVD 7.6

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can cause Net::IMAP#starttls to return "successfully", without starting TLS. This issue has been patched in versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4.

Record
CVE-2026-42246
CVSS 4.0
7.6 HighCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness
CWE-392, CWE-393, CWE-636, CWE-754, CWE-841, CWE-325
Updated
2026-11-02
OSVALPINE-CVE-2026-42246 7.4

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can cause Net::IMAP#starttls to return "successfully", without starting TLS. This issue has been patched in versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4.

Record
ALPINE-CVE-2026-42246
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVBELL-CVE-2026-42246 7.4
Record
BELL-CVE-2026-42246
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
Show 48 moreShow less
OSV 7.6

net-imap vulnerable to STARTTLS stripping via invalid response timing

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can cause Net::IMAP#starttls to return "successfully", without starting TLS. This issue has been patched in versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4.

Record
CVE-2026-42246
CVSS 4.0
7.6 HighCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Weakness
CWE-392, CWE-393, CWE-636, CWE-754, CWE-841
Updated
2026-11-02
OSVDEBIAN-CVE-2026-42246 7.4

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can cause Net::IMAP#starttls to return "successfully", without starting TLS. This issue has been patched in versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4.

Record
DEBIAN-CVE-2026-42246
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-07
OSVGHSA-vcgp-9326-pqcp 7.6

net-imap vulnerable to STARTTLS stripping via invalid response timing

Summary

A man-in-the-middle attacker can cause Net::IMAP#starttls to return "successfully", without starting TLS.

Details

When using Net::IMAP#starttls to upgrade a plaintext connection to use TLS, a man-in-the-middle attacker can inject a tagged OK response with an easily predictable tag. By sending the response before the client finishes sending the command, the command completes "successfully" before the response handler is registered. This allows #starttls to return without error, but the response handler is never invoked, the TLS connection is never established, and the socket remains unencrypted.

This allows man-in-the-middle attackers to perform a STARTTLS stripping attack, unless the client code explicitly checks Net::IMAP#tls_verified?.

Impact

TLS bypass, leading to cleartext transmission of sensitive information.

Mitigation

  • Upgrade to a patched version of net-imap that raises an exception whenever #starttls does not establish TLS.
  • Connect to an implicit TLS port, rather than use STARTTLS with a cleartext port. This is strongly recommended anyway:
    • RFC 8314: Cleartext Considered Obsolete: Use of Transport Layer Security (TLS) for Email Submission and Access
    • NO STARTTLS: Why TLS is better without STARTTLS, A Security Analysis of STARTTLS in the Email Context
  • Explicitly verify Net::IMAP#tls_verified? is true, before using the connection after #starttls.
Record
GHSA-vcgp-9326-pqcp
CVSS 4.0
7.6 HighCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Weakness
CWE-392, CWE-393, CWE-636, CWE-754, CWE-841
Updated
2026-11-02
OSVOESA-2026-2578 9.8

ruby security update

Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks (such as Perl).

Security Fix(es):

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, Net::IMAP::ResponseReader has quadratic time complexity when reading large responses containing many string literals. A hostile server can send responses which are crafted to exhaust the client's CPU for a denial of service attack. This issue has been patched in versions 0.4.24, 0.5.14, and 0.6.4.(CVE-2026-42245)

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can cause Net::IMAP#starttls to return "successfully", without starting TLS. This issue has been patched in versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4.(CVE-2026-42246)

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, several Net::IMAP commands accept a raw string argument that is sent to the server without validation or escaping. If this string is derived from user-controlled input, it may contain contain CRLF sequences, which an attacker can use to inject arbitrary IMAP commands. This issue has been patched in versions 0.4.24, 0.5.14, and 0.6.4.(CVE-2026-42257)

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, symbol arguments to commands are vulnerable to a CRLF Injection / IMAP Command injection via Symbol arguments passed to IMAP commands. This issue has been patched in versions 0.4.24, 0.5.14, and 0.6.4.(CVE-2026-42258)

Record
OESA-2026-2578
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:33462 8.1

Red Hat Security Advisory: ruby security update

Record
RHSA-2026:33462
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:33512 7.4

Red Hat Security Advisory: ruby security update

Record
RHSA-2026:33512
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:33514 7.4

Red Hat Security Advisory: ruby:2.5 security update

Record
RHSA-2026:33514
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:33515 7.4

Red Hat Security Advisory: ruby:3.3 security update

Record
RHSA-2026:33515
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:33540 7.4

Red Hat Security Advisory: ruby4.0 security update

Record
RHSA-2026:33540
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:33551 7.4

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:33551
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:33552 7.4

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:33552
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:33565 7.4

Red Hat Security Advisory: ruby security update

Record
RHSA-2026:33565
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:33576 7.4

Red Hat Security Advisory: ruby:3.3 security update

Record
RHSA-2026:33576
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:33577 7.4

Red Hat Security Advisory: ruby:4.0 security update

Record
RHSA-2026:33577
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:33630 7.4

Red Hat Security Advisory: ruby security update

Record
RHSA-2026:33630
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:33721 7.4

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:33721
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:34076 7.4

Red Hat Security Advisory: ruby:2.5 security update

Record
RHSA-2026:34076
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:35834 8.1

Red Hat Security Advisory: ruby security update

Record
RHSA-2026:35834
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:35866 7.4

Red Hat Security Advisory: ruby:2.5 security update

Record
RHSA-2026:35866
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:35867 7.4

Red Hat Security Advisory: ruby:2.5 security update

Record
RHSA-2026:35867
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:35895 7.4

Red Hat Security Advisory: ruby security update

Record
RHSA-2026:35895
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:36099 7.4

Red Hat Security Advisory: ruby:3.3 security update

Record
RHSA-2026:36099
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:37238 8.1

Red Hat Security Advisory: ruby:3.3 security update

Record
RHSA-2026:37238
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:37397 7.4

Red Hat Security Advisory: ruby security update

Record
RHSA-2026:37397
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:38694 7.4

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:38694
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:33512 7.4

Important: ruby security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

  • ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258)

  • net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:33512
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:33514 7.4

Important: ruby:2.5 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

  • ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258)

  • net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:33514
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:33515 7.4

Important: ruby:3.3 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

  • ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses (CVE-2026-42245)

  • ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258)

  • net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:33515
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:33540 7.4

Important: ruby4.0 security update

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks (as in Perl). It is simple, straight-forward, and extensible.

Security Fix(es):

  • ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses (CVE-2026-42245)

  • ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258)

  • net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:33540
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:33565 7.4

Important: ruby security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

  • ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses (CVE-2026-42245)

  • ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258)

  • net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:33565
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:33576 7.4

Important: ruby:3.3 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

  • ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses (CVE-2026-42245)

  • ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258)

  • net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:33576
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:33577 7.4

Important: ruby:4.0 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

  • ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses (CVE-2026-42245)

  • ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258)

  • net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:33577
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVROOT-APP-RUBY-CVE-2026-42246 7.4

CVE-2026-42246 in net-imap - Patched by Root

Root has patched CVE-2026-42246 in the net-imap package for Root:Ruby. Multiple fixed versions available.

Record
ROOT-APP-RUBY-CVE-2026-42246
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2026-42246 7.6

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can cause Net::IMAP#starttls to return "successfully", without starting TLS. This issue has been patched in versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4.

Record
UBUNTU-CVE-2026-42246
CVSS 4.0
7.6 HighCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVALSA-2026:33512 No score

Important: ruby security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

  • ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258)
  • net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:33512
Updated
2026-11-02
OSVALSA-2026:33514 No score

Important: ruby:2.5 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

  • ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258)
  • net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:33514
Updated
2026-11-02
OSVALSA-2026:33515 No score

Important: ruby:3.3 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

  • ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses (CVE-2026-42245)
  • ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258)
  • net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:33515
Updated
2026-11-02
OSVALSA-2026:33540 No score

Important: ruby4.0 security update

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks (as in Perl). It is simple, straight-forward, and extensible.

Security Fix(es):

  • ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses (CVE-2026-42245)
  • ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258)
  • net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:33540
Updated
2026-11-02
OSVALSA-2026:33565 No score

Important: ruby security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

  • ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses (CVE-2026-42245)
  • ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258)
  • net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:33565
Updated
2026-11-02
OSVALSA-2026:33576 No score

Important: ruby:3.3 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

  • ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses (CVE-2026-42245)
  • ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258)
  • net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:33576
Updated
2026-11-02
OSVALSA-2026:33577 No score

Important: ruby:4.0 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

  • ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses (CVE-2026-42245)
  • ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258)
  • net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:33577
Updated
2026-11-02
OSVCLSA-2026-1783525446 No score

ruby: Fix of CVE-2026-42246

  • CVE-2026-42246: fix Net::IMAP STARTTLS response-injection / TLS stripping by guarding send_command against a tagged OK arriving before the response handler runs, and raising InvalidResponseError when the STARTTLS handler is bypassed
Record
CLSA-2026-1783525446
Updated
2026-11-02
OSVCLSA-2026-1784073521 No score

ruby: Fix of 2 CVEs

  • CVE-2026-42246: net-imap: fix STARTTLS stripping (TLS downgrade by MITM)
  • CVE-2026-42258: net-imap: validate Symbol flag args (CRLF injection)
Record
CLSA-2026-1784073521
Updated
2026-11-02
OSVCLSA-2026-1792167430 No score

ruby: Fix of 20 CVEs

  • CVE-2026-42246: fix Net::IMAP#starttls returning success without TLS on a man-in-the-middle error response
  • CVE-2026-42258: fix IMAP command injection via Symbol arguments
Record
CLSA-2026-1792167430
Updated
2026-11-02
OSVCLSA-2026-1792174968 No score

ruby: Fix of 19 CVEs

  • CVE-2026-42246: fix Net::IMAP#starttls returning success without TLS on a man-in-the-middle error response
  • CVE-2026-42258: fix IMAP command injection via Symbol arguments
Record
CLSA-2026-1792174968
Updated
2026-11-02
OSVCLSA-2026-1792242216 No score

ruby: Fix of CVE-2026-42246

  • CVE-2026-42246: fix Net::IMAP#starttls returning success without TLS on a man-in-the-middle error response
  • CVE-2026-42258: fix IMAP command injection via Symbol arguments
Record
CLSA-2026-1792242216
Updated
2026-11-02
OSVopenSUSE-SU-2026:12153-1 No score

hawk2-2.7.2+git.1792148770.648dcddb-1.1 on GA media

These are all security issues fixed in the hawk2-2.7.2+git.1792148770.648dcddb-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:12153-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:22068-1 No score

Security update for hawk2

This update for hawk2 fixes the following issues:

  • CVE-2026-42246: net-imap: MITM attacker can cause Net::IMAP#starttls to return successfully, without starting TLS (bsc#1268996).
  • CVE-2026-66066: unsafe image processing operations on untrusted uploads can allow arbitrary file reading and remote code execution (bsc#1273348).
  • CVE-2026-71847: json: heap use-after free in JSON::ResumableParser partial_value can lead to crash on truncated duplicate-key streams (bsc#1275213).
  • CVE-2026-73490: loofah: improper handling of SVG attributes in the HTML5 sanitizer allows bypass of local-reference restrictions (bsc#1275179).
  • CVE-2026-73491: loofah: improper handling of javascript: URIs can lead to XSS (bsc#1275183).
  • CVE-2026-73492: loofah: improper handling of javascript: and vbscript: URIs can lead to XSS (bsc#1275188).
  • CVE-2026-73648: rails-html-sanitizer: cross-site scripting is possible when the sanitizer is configured to allow certain SVG reference elements (bsc#1275200).

Changes for hawk2:

  • Update to version 2.7.2+git.1788518533.7d4dadd6 (bsc#1275019):
  • Test: give sle15 more time when choosing between sle15 and sle16
  • Dev: bump jQuery version to 4.0.0
  • Dev: bump jQuery version to 3.5.0
  • Dev: bump jQuery version to 2.2.4
  • Test: update the e2e test for the change allowing custom parameters
  • Dev: enable custom Parameters and Meta Attributes (bsc#1274860)
  • CI/CD: update hawk examiner entry point
  • Test: enable test_add_clone against hawk-apiserver verion 0.2.1
  • Test: fix SyntaxWarning: invalid escape sequence '|'
  • Test: make the tests compatible against hawk-apiserver ver0.2.0
Record
openSUSE-SU-2026:22068-1
Updated
2026-11-02

Affected products

Show 8 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
net-imap
RubyGems
 0.6.0 to 0.6.3
0.6.4
net-imap
RubyGems
 0.5.0 to 0.5.13
0.5.14
net-imap
RubyGems
 0.4.0 to 0.4.23
0.4.24
net-imap
RubyGems
 through 0.3.9
0.3.10
ruby-net-imap
Alpine:v3.21
 before 0.4.25-r0
0.4.25-r0
ruby
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.0.7-167.el9_8
3.0.7-167.el9_8
ruby-default-gems
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.0.7-167.el9_8
3.0.7-167.el9_8
ruby-devel
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.0.7-167.el9_8
3.0.7-167.el9_8
ruby-doc
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.0.7-167.el9_8
3.0.7-167.el9_8
ruby-libs
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.0.7-167.el9_8
3.0.7-167.el9_8
Show 290 moreShow less
Affected packages
PackageAffectedFixed
rubygem-bigdecimal
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.0.0-167.el9_8
3.0.0-167.el9_8
rubygem-bundler
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.2.33-167.el9_8
2.2.33-167.el9_8
rubygem-io-console
AlmaLinux:9
From an advisory covering 2 CVEs
 before 0.5.7-167.el9_8
0.5.7-167.el9_8
rubygem-irb
AlmaLinux:9
From an advisory covering 2 CVEs
 before 1.3.5-167.el9_8
1.3.5-167.el9_8
rubygem-json
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.5.1-167.el9_8
2.5.1-167.el9_8
rubygem-minitest
AlmaLinux:9
From an advisory covering 2 CVEs
 before 5.14.2-167.el9_8
5.14.2-167.el9_8
rubygem-power_assert
AlmaLinux:9
From an advisory covering 2 CVEs
 before 1.2.1-167.el9_8
1.2.1-167.el9_8
rubygem-psych
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.3.2-167.el9_8
3.3.2-167.el9_8
rubygem-rake
AlmaLinux:9
From an advisory covering 2 CVEs
 before 13.0.3-167.el9_8
13.0.3-167.el9_8
rubygem-rbs
AlmaLinux:9
From an advisory covering 2 CVEs
 before 1.4.0-167.el9_8
1.4.0-167.el9_8
rubygem-rdoc
AlmaLinux:9
From an advisory covering 2 CVEs
 before 6.3.4.1-167.el9_8
6.3.4.1-167.el9_8
rubygem-rexml
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.2.5-167.el9_8
3.2.5-167.el9_8
rubygem-rss
AlmaLinux:9
From an advisory covering 2 CVEs
 before 0.2.9-167.el9_8
0.2.9-167.el9_8
rubygem-test-unit
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.3.7-167.el9_8
3.3.7-167.el9_8
rubygem-typeprof
AlmaLinux:9
From an advisory covering 2 CVEs
 before 0.15.2-167.el9_8
0.15.2-167.el9_8
rubygems
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.2.33-167.el9_8
3.2.33-167.el9_8
rubygems-devel
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.2.33-167.el9_8
3.2.33-167.el9_8
ruby
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.5.9-115.module_el8.10.0+4212+150d00eb
2.5.9-115.module_el8.10.0+4212+150d00eb
ruby-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.5.9-115.module_el8.10.0+4212+150d00eb
2.5.9-115.module_el8.10.0+4212+150d00eb
ruby-doc
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.5.9-115.module_el8.10.0+4212+150d00eb
2.5.9-115.module_el8.10.0+4212+150d00eb
ruby-irb
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.5.9-115.module_el8.10.0+4212+150d00eb
2.5.9-115.module_el8.10.0+4212+150d00eb
ruby-libs
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.5.9-115.module_el8.10.0+4212+150d00eb
2.5.9-115.module_el8.10.0+4212+150d00eb
rubygem-abrt
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.3.0-4.module_el8.5.0+2625+ec418553
0.3.0-4.module_el8.5.0+2625+ec418553
rubygem-abrt-doc
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.3.0-4.module_el8.10.0+3871+342e2c2f
0.3.0-4.module_el8.10.0+3871+342e2c2f
rubygem-bigdecimal
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.3.4-115.module_el8.10.0+4212+150d00eb
1.3.4-115.module_el8.10.0+4212+150d00eb
rubygem-bson
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4.3.0-2.module_el8.5.0+2625+ec418553
4.3.0-2.module_el8.5.0+2625+ec418553
rubygem-bson
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4.3.0-2.module_el8.6.0+3170+4b08f9d4
4.3.0-2.module_el8.6.0+3170+4b08f9d4
rubygem-bson
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4.3.0-2.module_el8.5.0+259+8cec6917
4.3.0-2.module_el8.5.0+259+8cec6917
rubygem-bson-doc
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4.3.0-2.module_el8.5.0+2625+ec418553
4.3.0-2.module_el8.5.0+2625+ec418553
rubygem-bundler
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.16.1-5.module_el8.10.0+3991+5e651d4e
1.16.1-5.module_el8.10.0+3991+5e651d4e
rubygem-bundler-doc
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.16.1-5.module_el8.10.0+3991+5e651d4e
1.16.1-5.module_el8.10.0+3991+5e651d4e
rubygem-did_you_mean
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.2.0-115.module_el8.10.0+4212+150d00eb
1.2.0-115.module_el8.10.0+4212+150d00eb
rubygem-io-console
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.4.6-115.module_el8.10.0+4212+150d00eb
0.4.6-115.module_el8.10.0+4212+150d00eb
rubygem-json
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.1.0-115.module_el8.10.0+4212+150d00eb
2.1.0-115.module_el8.10.0+4212+150d00eb
rubygem-minitest
AlmaLinux:8
From an advisory covering 2 CVEs
 before 5.10.3-115.module_el8.10.0+4212+150d00eb
5.10.3-115.module_el8.10.0+4212+150d00eb
rubygem-mongo
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.5.1-2.module_el8.5.0+2625+ec418553
2.5.1-2.module_el8.5.0+2625+ec418553
rubygem-mongo-doc
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.5.1-2.module_el8.5.0+2625+ec418553
2.5.1-2.module_el8.5.0+2625+ec418553
rubygem-mysql2
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.4.10-4.module_el8.5.0+259+8cec6917
0.4.10-4.module_el8.5.0+259+8cec6917
rubygem-mysql2
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.4.10-4.module_el8.5.0+2625+ec418553
0.4.10-4.module_el8.5.0+2625+ec418553
rubygem-mysql2
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.4.10-4.module_el8.6.0+3170+4b08f9d4
0.4.10-4.module_el8.6.0+3170+4b08f9d4
rubygem-mysql2-doc
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.4.10-4.module_el8.5.0+2625+ec418553
0.4.10-4.module_el8.5.0+2625+ec418553
rubygem-net-telnet
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.1.1-115.module_el8.10.0+4212+150d00eb
0.1.1-115.module_el8.10.0+4212+150d00eb
rubygem-openssl
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.1.2-115.module_el8.10.0+4212+150d00eb
2.1.2-115.module_el8.10.0+4212+150d00eb
rubygem-pg
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.0.0-3.module_el8.9.0+3635+c6f99506
1.0.0-3.module_el8.9.0+3635+c6f99506
rubygem-pg-doc
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.0.0-3.module_el8.9.0+3635+c6f99506
1.0.0-3.module_el8.9.0+3635+c6f99506
rubygem-power_assert
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.1.1-115.module_el8.10.0+4212+150d00eb
1.1.1-115.module_el8.10.0+4212+150d00eb
rubygem-psych
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.0.2-115.module_el8.10.0+4212+150d00eb
3.0.2-115.module_el8.10.0+4212+150d00eb
rubygem-rake
AlmaLinux:8
From an advisory covering 2 CVEs
 before 12.3.3-115.module_el8.10.0+4212+150d00eb
12.3.3-115.module_el8.10.0+4212+150d00eb
rubygem-rdoc
AlmaLinux:8
From an advisory covering 2 CVEs
 before 6.0.1.1-115.module_el8.10.0+4212+150d00eb
6.0.1.1-115.module_el8.10.0+4212+150d00eb
rubygem-test-unit
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.2.7-115.module_el8.10.0+4212+150d00eb
3.2.7-115.module_el8.10.0+4212+150d00eb
rubygem-xmlrpc
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.3.0-115.module_el8.10.0+4212+150d00eb
0.3.0-115.module_el8.10.0+4212+150d00eb
rubygems
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.7.6.3-115.module_el8.10.0+4212+150d00eb
2.7.6.3-115.module_el8.10.0+4212+150d00eb
rubygems-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.7.6.3-115.module_el8.10.0+4212+150d00eb
2.7.6.3-115.module_el8.10.0+4212+150d00eb
ruby
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.3.10-7.module_el8.10.0+4210+b037b1ec
3.3.10-7.module_el8.10.0+4210+b037b1ec
ruby-bundled-gems
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.3.10-7.module_el8.10.0+4210+b037b1ec
3.3.10-7.module_el8.10.0+4210+b037b1ec
ruby-default-gems
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.3.10-7.module_el8.10.0+4210+b037b1ec
3.3.10-7.module_el8.10.0+4210+b037b1ec
ruby-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.3.10-7.module_el8.10.0+4210+b037b1ec
3.3.10-7.module_el8.10.0+4210+b037b1ec
ruby-doc
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.3.10-7.module_el8.10.0+4210+b037b1ec
3.3.10-7.module_el8.10.0+4210+b037b1ec
ruby-libs
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.3.10-7.module_el8.10.0+4210+b037b1ec
3.3.10-7.module_el8.10.0+4210+b037b1ec
rubygem-abrt
AlmaLinux:8
From an advisory covering 3 CVEs
 before 0.4.0-1.module_el8.10.0+3799+191214cc
0.4.0-1.module_el8.10.0+3799+191214cc
rubygem-abrt-doc
AlmaLinux:8
From an advisory covering 3 CVEs
 before 0.4.0-1.module_el8.10.0+3799+191214cc
0.4.0-1.module_el8.10.0+3799+191214cc
rubygem-bigdecimal
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.1.5-7.module_el8.10.0+4210+b037b1ec
3.1.5-7.module_el8.10.0+4210+b037b1ec
rubygem-bundler
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.5.22-7.module_el8.10.0+4210+b037b1ec
2.5.22-7.module_el8.10.0+4210+b037b1ec
rubygem-io-console
AlmaLinux:8
From an advisory covering 3 CVEs
 before 0.7.1-7.module_el8.10.0+4210+b037b1ec
0.7.1-7.module_el8.10.0+4210+b037b1ec
rubygem-irb
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.13.1-7.module_el8.10.0+4210+b037b1ec
1.13.1-7.module_el8.10.0+4210+b037b1ec
rubygem-json
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.7.2-7.module_el8.10.0+4210+b037b1ec
2.7.2-7.module_el8.10.0+4210+b037b1ec
rubygem-minitest
AlmaLinux:8
From an advisory covering 3 CVEs
 before 5.20.0-7.module_el8.10.0+4210+b037b1ec
5.20.0-7.module_el8.10.0+4210+b037b1ec
rubygem-mysql2
AlmaLinux:8
From an advisory covering 3 CVEs
 before 0.5.5-1.module_el8.10.0+3799+191214cc
0.5.5-1.module_el8.10.0+3799+191214cc
rubygem-mysql2-doc
AlmaLinux:8
From an advisory covering 3 CVEs
 before 0.5.5-1.module_el8.10.0+3799+191214cc
0.5.5-1.module_el8.10.0+3799+191214cc
rubygem-pg
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.5.4-1.module_el8.10.0+3799+191214cc
1.5.4-1.module_el8.10.0+3799+191214cc
rubygem-pg-doc
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.5.4-1.module_el8.10.0+3799+191214cc
1.5.4-1.module_el8.10.0+3799+191214cc
rubygem-power_assert
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2.0.3-7.module_el8.10.0+4210+b037b1ec
2.0.3-7.module_el8.10.0+4210+b037b1ec
rubygem-psych
AlmaLinux:8
From an advisory covering 3 CVEs
 before 5.1.2-7.module_el8.10.0+4210+b037b1ec
5.1.2-7.module_el8.10.0+4210+b037b1ec
rubygem-racc
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.7.3-7.module_el8.10.0+4210+b037b1ec
1.7.3-7.module_el8.10.0+4210+b037b1ec
ruby-net-imap
Alpaquita:25
 0.5.8-r0 up to 0.5.14-r0
0.5.14-r0
ruby-net-imap
Alpaquita:stream
 0.4.8-r0 up to 0.5.14-r0
0.5.14-r0
ruby
TuxCare:AlmaLinux:9.2
 before 3.0.4-160.el9_2.tuxcare.els16
3.0.4-160.el9_2.tuxcare.els16
ruby-default-gems
TuxCare:AlmaLinux:9.2
 before 3.0.4-160.el9_2.tuxcare.els16
3.0.4-160.el9_2.tuxcare.els16
ruby-devel
TuxCare:AlmaLinux:9.2
 before 3.0.4-160.el9_2.tuxcare.els16
3.0.4-160.el9_2.tuxcare.els16
ruby-doc
TuxCare:AlmaLinux:9.2
 before 3.0.4-160.el9_2.tuxcare.els16
3.0.4-160.el9_2.tuxcare.els16
ruby-libs
TuxCare:AlmaLinux:9.2
 before 3.0.4-160.el9_2.tuxcare.els16
3.0.4-160.el9_2.tuxcare.els16
rubygem-bigdecimal
TuxCare:AlmaLinux:9.2
 before 3.0.0-160.el9_2.tuxcare.els16
3.0.0-160.el9_2.tuxcare.els16
rubygem-bundler
TuxCare:AlmaLinux:9.2
 before 2.2.33-160.el9_2.tuxcare.els16
2.2.33-160.el9_2.tuxcare.els16
rubygem-io-console
TuxCare:AlmaLinux:9.2
 before 0.5.7-160.el9_2.tuxcare.els16
0.5.7-160.el9_2.tuxcare.els16
rubygem-irb
TuxCare:AlmaLinux:9.2
 before 1.3.5-160.el9_2.tuxcare.els16
1.3.5-160.el9_2.tuxcare.els16
rubygem-json
TuxCare:AlmaLinux:9.2
 before 2.5.1-160.el9_2.tuxcare.els16
2.5.1-160.el9_2.tuxcare.els16
rubygem-minitest
TuxCare:AlmaLinux:9.2
 before 5.14.2-160.el9_2.tuxcare.els16
5.14.2-160.el9_2.tuxcare.els16
rubygem-power_assert
TuxCare:AlmaLinux:9.2
 before 1.2.0-160.el9_2.tuxcare.els16
1.2.0-160.el9_2.tuxcare.els16
rubygem-psych
TuxCare:AlmaLinux:9.2
 before 3.3.2-160.el9_2.tuxcare.els16
3.3.2-160.el9_2.tuxcare.els16
rubygem-rake
TuxCare:AlmaLinux:9.2
 before 13.0.3-160.el9_2.tuxcare.els16
13.0.3-160.el9_2.tuxcare.els16
rubygem-rbs
TuxCare:AlmaLinux:9.2
 before 1.4.0-160.el9_2.tuxcare.els16
1.4.0-160.el9_2.tuxcare.els16
rubygem-rdoc
TuxCare:AlmaLinux:9.2
 before 6.3.3-160.el9_2.tuxcare.els16
6.3.3-160.el9_2.tuxcare.els16
rubygem-rexml
TuxCare:AlmaLinux:9.2
 before 3.3.3-160.el9_2.tuxcare.els16
3.3.3-160.el9_2.tuxcare.els16
rubygem-rss
TuxCare:AlmaLinux:9.2
 before 0.2.9-160.el9_2.tuxcare.els16
0.2.9-160.el9_2.tuxcare.els16
rubygem-test-unit
TuxCare:AlmaLinux:9.2
 before 3.3.7-160.el9_2.tuxcare.els16
3.3.7-160.el9_2.tuxcare.els16
rubygem-typeprof
TuxCare:AlmaLinux:9.2
 before 0.15.2-160.el9_2.tuxcare.els16
0.15.2-160.el9_2.tuxcare.els16
rubygems
TuxCare:AlmaLinux:9.2
 before 3.2.33-160.el9_2.tuxcare.els16
3.2.33-160.el9_2.tuxcare.els16
rubygems-devel
TuxCare:AlmaLinux:9.2
 before 3.2.33-160.el9_2.tuxcare.els16
3.2.33-160.el9_2.tuxcare.els16
ruby
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 3.0.7-165.el9_6.tuxcare.els6
3.0.7-165.el9_6.tuxcare.els6
ruby-default-gems
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 3.0.7-165.el9_6.tuxcare.els6
3.0.7-165.el9_6.tuxcare.els6
ruby-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 3.0.7-165.el9_6.tuxcare.els6
3.0.7-165.el9_6.tuxcare.els6
ruby-doc
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 3.0.7-165.el9_6.tuxcare.els6
3.0.7-165.el9_6.tuxcare.els6
ruby-libs
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 3.0.7-165.el9_6.tuxcare.els6
3.0.7-165.el9_6.tuxcare.els6
rubygem-bigdecimal
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 3.0.0-165.el9_6.tuxcare.els6
3.0.0-165.el9_6.tuxcare.els6
rubygem-bundler
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.2.33-165.el9_6.tuxcare.els6
2.2.33-165.el9_6.tuxcare.els6
rubygem-io-console
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 0.5.7-165.el9_6.tuxcare.els6
0.5.7-165.el9_6.tuxcare.els6
rubygem-irb
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 1.3.5-165.el9_6.tuxcare.els6
1.3.5-165.el9_6.tuxcare.els6
rubygem-json
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 2.5.1-165.el9_6.tuxcare.els6
2.5.1-165.el9_6.tuxcare.els6
rubygem-minitest
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 5.14.2-165.el9_6.tuxcare.els6
5.14.2-165.el9_6.tuxcare.els6
rubygem-power_assert
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 1.2.1-165.el9_6.tuxcare.els6
1.2.1-165.el9_6.tuxcare.els6
rubygem-psych
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 3.3.2-165.el9_6.tuxcare.els6
3.3.2-165.el9_6.tuxcare.els6
rubygem-rake
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 13.0.3-165.el9_6.tuxcare.els6
13.0.3-165.el9_6.tuxcare.els6
rubygem-rbs
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 1.4.0-165.el9_6.tuxcare.els6
1.4.0-165.el9_6.tuxcare.els6
rubygem-rdoc
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 6.3.4.1-165.el9_6.tuxcare.els6
6.3.4.1-165.el9_6.tuxcare.els6
rubygem-rexml
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 3.2.5-165.el9_6.tuxcare.els6
3.2.5-165.el9_6.tuxcare.els6
rubygem-rss
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 0.2.9-165.el9_6.tuxcare.els6
0.2.9-165.el9_6.tuxcare.els6
rubygem-test-unit
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 3.3.7-165.el9_6.tuxcare.els6
3.3.7-165.el9_6.tuxcare.els6
rubygem-typeprof
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 0.15.2-165.el9_6.tuxcare.els6
0.15.2-165.el9_6.tuxcare.els6
rubygems
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 3.2.33-165.el9_6.tuxcare.els6
3.2.33-165.el9_6.tuxcare.els6
rubygems-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 3.2.33-165.el9_6.tuxcare.els6
3.2.33-165.el9_6.tuxcare.els6
ruby
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 2.0.0.648-39.el7_9.tuxcare.els15
2.0.0.648-39.el7_9.tuxcare.els15
ruby-devel
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 2.0.0.648-39.el7_9.tuxcare.els15
2.0.0.648-39.el7_9.tuxcare.els15
ruby-doc
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 2.0.0.648-39.el7_9.tuxcare.els15
2.0.0.648-39.el7_9.tuxcare.els15
ruby-irb
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 2.0.0.648-39.el7_9.tuxcare.els15
2.0.0.648-39.el7_9.tuxcare.els15
ruby-libs
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 2.0.0.648-39.el7_9.tuxcare.els15
2.0.0.648-39.el7_9.tuxcare.els15
ruby-tcltk
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 2.0.0.648-39.el7_9.tuxcare.els15
2.0.0.648-39.el7_9.tuxcare.els15
rubygem-bigdecimal
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 1.2.0-39.el7_9.tuxcare.els15
1.2.0-39.el7_9.tuxcare.els15
rubygem-io-console
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 0.4.2-39.el7_9.tuxcare.els15
0.4.2-39.el7_9.tuxcare.els15
rubygem-json
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 1.7.7-39.el7_9.tuxcare.els15
1.7.7-39.el7_9.tuxcare.els15
rubygem-minitest
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 4.3.2-39.el7_9.tuxcare.els15
4.3.2-39.el7_9.tuxcare.els15
rubygem-psych
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 2.0.0-39.el7_9.tuxcare.els15
2.0.0-39.el7_9.tuxcare.els15
rubygem-rake
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 0.9.6-39.el7_9.tuxcare.els15
0.9.6-39.el7_9.tuxcare.els15
rubygem-rdoc
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 4.0.0-39.el7_9.tuxcare.els15
4.0.0-39.el7_9.tuxcare.els15
rubygems
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 2.0.14.1-39.el7_9.tuxcare.els15
2.0.14.1-39.el7_9.tuxcare.els15
rubygems-devel
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 2.0.14.1-39.el7_9.tuxcare.els15
2.0.14.1-39.el7_9.tuxcare.els15
ruby
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 2.0.0.648-39.el7_9.tuxcare.els15
2.0.0.648-39.el7_9.tuxcare.els15
ruby-devel
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 2.0.0.648-39.el7_9.tuxcare.els15
2.0.0.648-39.el7_9.tuxcare.els15
ruby-doc
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 2.0.0.648-39.el7_9.tuxcare.els15
2.0.0.648-39.el7_9.tuxcare.els15
ruby-irb
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 2.0.0.648-39.el7_9.tuxcare.els15
2.0.0.648-39.el7_9.tuxcare.els15
ruby-libs
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 2.0.0.648-39.el7_9.tuxcare.els15
2.0.0.648-39.el7_9.tuxcare.els15
ruby-tcltk
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 2.0.0.648-39.el7_9.tuxcare.els15
2.0.0.648-39.el7_9.tuxcare.els15
rubygem-bigdecimal
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 1.2.0-39.el7_9.tuxcare.els15
1.2.0-39.el7_9.tuxcare.els15
rubygem-io-console
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 0.4.2-39.el7_9.tuxcare.els15
0.4.2-39.el7_9.tuxcare.els15
rubygem-json
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 1.7.7-39.el7_9.tuxcare.els15
1.7.7-39.el7_9.tuxcare.els15
rubygem-minitest
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 4.3.2-39.el7_9.tuxcare.els15
4.3.2-39.el7_9.tuxcare.els15
rubygem-psych
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 2.0.0-39.el7_9.tuxcare.els15
2.0.0-39.el7_9.tuxcare.els15
rubygem-rake
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 0.9.6-39.el7_9.tuxcare.els15
0.9.6-39.el7_9.tuxcare.els15
rubygem-rdoc
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 4.0.0-39.el7_9.tuxcare.els15
4.0.0-39.el7_9.tuxcare.els15
rubygems
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 2.0.14.1-39.el7_9.tuxcare.els15
2.0.14.1-39.el7_9.tuxcare.els15
rubygems-devel
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 2.0.14.1-39.el7_9.tuxcare.els15
2.0.14.1-39.el7_9.tuxcare.els15
ruby
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 2.0.0.648-39.el7_9.tuxcare.els15
2.0.0.648-39.el7_9.tuxcare.els15
ruby-devel
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 2.0.0.648-39.el7_9.tuxcare.els15
2.0.0.648-39.el7_9.tuxcare.els15
ruby-doc
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 2.0.0.648-39.el7_9.tuxcare.els15
2.0.0.648-39.el7_9.tuxcare.els15
ruby-irb
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 2.0.0.648-39.el7_9.tuxcare.els15
2.0.0.648-39.el7_9.tuxcare.els15
ruby-libs
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 2.0.0.648-39.el7_9.tuxcare.els15
2.0.0.648-39.el7_9.tuxcare.els15
ruby3.1
Debian:12
 All versions, plus listed versions
3.1.2-73.1.2-7+deb12u13.1.2-7+hurd.13.1.2-83.1.2-8.1~exp13.1.2-8.33.1.2-8.43.1.2-8.5
 None known
ruby3.3
Debian:13
 before 3.3.13-0+deb13u1, plus listed versions
3.3.8-23.3.8-2.13.3.8-2.2
3.3.13-0+deb13u1
ruby3.3
Debian:14
 All versions, plus listed versions
3.3.8-23.3.8-2.13.3.8-2.2
 None known
net-imap
RubyGems
 0.6.0 up to 0.6.4, plus listed versions
0.6.10.6.20.6.3
0.6.4
net-imap
RubyGems
 0.5.0 up to 0.5.14, plus listed versions
0.5.10.5.100.5.110.5.120.5.13
Show 8 moreShow less
0.5.20.5.30.5.40.5.50.5.60.5.70.5.80.5.9
0.5.14
net-imap
RubyGems
 0.4.0 up to 0.4.24, plus listed versions
0.4.10.4.100.4.110.4.120.4.13
Show 19 moreShow less
0.4.140.4.150.4.160.4.170.4.180.4.190.4.20.4.200.4.210.4.220.4.230.4.30.4.40.4.50.4.60.4.70.4.80.4.90.4.9.1
0.4.24
net-imap
RubyGems
 before 0.3.10, plus listed versions
0.1.00.1.10.2.00.2.10.2.2
Show 14 moreShow less
0.2.30.2.40.2.50.3.00.3.10.3.20.3.30.3.40.3.4.10.3.50.3.60.3.70.3.80.3.9
0.3.10
ruby
openEuler:20.03-LTS-SP4
From an advisory covering 4 CVEs
 before 2.5.8-138.oe2003sp4
2.5.8-138.oe2003sp4
ruby
openEuler:22.03-LTS-SP4
From an advisory covering 4 CVEs
 before 3.0.3-146.oe2203sp4
3.0.3-146.oe2203sp4
ruby
openEuler:24.03-LTS-SP1
From an advisory covering 4 CVEs
 before 3.2.2-154.oe2403sp1
3.2.2-154.oe2403sp1
ruby
openEuler:24.03-LTS-SP3
From an advisory covering 4 CVEs
 before 3.2.2-154.oe2403sp3
3.2.2-154.oe2403sp3
ruby
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 3 CVEs
 before 0:3.0.7-165.el9_6.1
0:3.0.7-165.el9_6.1
ruby-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 3 CVEs
 before 0:3.0.7-165.el9_6.1
0:3.0.7-165.el9_6.1
ruby-debugsource
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 3 CVEs
 before 0:3.0.7-165.el9_6.1
0:3.0.7-165.el9_6.1
ruby-default-gems
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 3 CVEs
 before 0:3.0.7-165.el9_6.1
0:3.0.7-165.el9_6.1
ruby-devel
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 3 CVEs
 before 0:3.0.7-165.el9_6.1
0:3.0.7-165.el9_6.1
ruby-libs
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 3 CVEs
 before 0:3.0.7-165.el9_6.1
0:3.0.7-165.el9_6.1
ruby-libs-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 3 CVEs
 before 0:3.0.7-165.el9_6.1
0:3.0.7-165.el9_6.1
rubygem-bigdecimal
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 3 CVEs
 before 0:3.0.0-165.el9_6.1
0:3.0.0-165.el9_6.1
rubygem-bigdecimal-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 3 CVEs
 before 0:3.0.0-165.el9_6.1
0:3.0.0-165.el9_6.1
rubygem-bundler
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 3 CVEs
 before 0:2.2.33-165.el9_6.1
0:2.2.33-165.el9_6.1
rubygem-io-console
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 3 CVEs
 before 0:0.5.7-165.el9_6.1
0:0.5.7-165.el9_6.1
rubygem-io-console-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 3 CVEs
 before 0:0.5.7-165.el9_6.1
0:0.5.7-165.el9_6.1
rubygem-irb
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 3 CVEs
 before 0:1.3.5-165.el9_6.1
0:1.3.5-165.el9_6.1
rubygem-json
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 3 CVEs
 before 0:2.5.1-165.el9_6.1
0:2.5.1-165.el9_6.1
rubygem-json-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 3 CVEs
 before 0:2.5.1-165.el9_6.1
0:2.5.1-165.el9_6.1
rubygem-minitest
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 3 CVEs
 before 0:5.14.2-165.el9_6.1
0:5.14.2-165.el9_6.1
rubygem-power_assert
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 3 CVEs
 before 0:1.2.1-165.el9_6.1
0:1.2.1-165.el9_6.1
rubygem-psych
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 3 CVEs
 before 0:3.3.2-165.el9_6.1
0:3.3.2-165.el9_6.1
rubygem-psych-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 3 CVEs
 before 0:3.3.2-165.el9_6.1
0:3.3.2-165.el9_6.1
rubygem-rake
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 3 CVEs
 before 0:13.0.3-165.el9_6.1
0:13.0.3-165.el9_6.1
rubygem-rbs
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 3 CVEs
 before 0:1.4.0-165.el9_6.1
0:1.4.0-165.el9_6.1
rubygem-rdoc
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 3 CVEs
 before 0:6.3.4.1-165.el9_6.1
0:6.3.4.1-165.el9_6.1
rubygem-rexml
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 3 CVEs
 before 0:3.2.5-165.el9_6.1
0:3.2.5-165.el9_6.1
rubygem-rss
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 3 CVEs
 before 0:0.2.9-165.el9_6.1
0:0.2.9-165.el9_6.1
rubygem-test-unit
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 3 CVEs
 before 0:3.3.7-165.el9_6.1
0:3.3.7-165.el9_6.1
rubygem-typeprof
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 3 CVEs
 before 0:0.15.2-165.el9_6.1
0:0.15.2-165.el9_6.1
rubygems
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 3 CVEs
 before 0:3.2.33-165.el9_6.1
0:3.2.33-165.el9_6.1
rubygems-devel
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 3 CVEs
 before 0:3.2.33-165.el9_6.1
0:3.2.33-165.el9_6.1
ruby-doc
Red Hat:rhel_eus:9.6::crb
From an advisory covering 3 CVEs
 before 0:3.0.7-165.el9_6.1
0:3.0.7-165.el9_6.1
ruby
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:3.0.7-167.el9_8
0:3.0.7-167.el9_8
ruby-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:3.0.7-167.el9_8
0:3.0.7-167.el9_8
ruby-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:3.0.7-167.el9_8
0:3.0.7-167.el9_8
ruby-default-gems
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:3.0.7-167.el9_8
0:3.0.7-167.el9_8
ruby-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:3.0.7-167.el9_8
0:3.0.7-167.el9_8
ruby-libs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:3.0.7-167.el9_8
0:3.0.7-167.el9_8
ruby-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:3.0.7-167.el9_8
0:3.0.7-167.el9_8
rubygem-bigdecimal
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:3.0.0-167.el9_8
0:3.0.0-167.el9_8
rubygem-bigdecimal-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:3.0.0-167.el9_8
0:3.0.0-167.el9_8
rubygem-bundler
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.2.33-167.el9_8
0:2.2.33-167.el9_8
rubygem-io-console
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:0.5.7-167.el9_8
0:0.5.7-167.el9_8
rubygem-io-console-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:0.5.7-167.el9_8
0:0.5.7-167.el9_8
rubygem-irb
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:1.3.5-167.el9_8
0:1.3.5-167.el9_8
rubygem-json
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.5.1-167.el9_8
0:2.5.1-167.el9_8
rubygem-json-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.5.1-167.el9_8
0:2.5.1-167.el9_8
rubygem-minitest
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:5.14.2-167.el9_8
0:5.14.2-167.el9_8
rubygem-power_assert
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:1.2.1-167.el9_8
0:1.2.1-167.el9_8
rubygem-psych
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:3.3.2-167.el9_8
0:3.3.2-167.el9_8
rubygem-psych-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:3.3.2-167.el9_8
0:3.3.2-167.el9_8
rubygem-rake
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:13.0.3-167.el9_8
0:13.0.3-167.el9_8
rubygem-rbs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:1.4.0-167.el9_8
0:1.4.0-167.el9_8
rubygem-rdoc
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:6.3.4.1-167.el9_8
0:6.3.4.1-167.el9_8
rubygem-rexml
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:3.2.5-167.el9_8
0:3.2.5-167.el9_8
rubygem-rss
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:0.2.9-167.el9_8
0:0.2.9-167.el9_8
rubygem-test-unit
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:3.3.7-167.el9_8
0:3.3.7-167.el9_8
rubygem-typeprof
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:0.15.2-167.el9_8
0:0.15.2-167.el9_8
rubygems
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:3.2.33-167.el9_8
0:3.2.33-167.el9_8
rubygems-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:3.2.33-167.el9_8
0:3.2.33-167.el9_8
ruby-doc
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:3.0.7-167.el9_8
0:3.0.7-167.el9_8
ruby
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.5.9-115.module+el8.10.0+24408+7ffaaa88
0:2.5.9-115.module+el8.10.0+24408+7ffaaa88
ruby-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.5.9-115.module+el8.10.0+24408+7ffaaa88
0:2.5.9-115.module+el8.10.0+24408+7ffaaa88
ruby-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.5.9-115.module+el8.10.0+24408+7ffaaa88
0:2.5.9-115.module+el8.10.0+24408+7ffaaa88
ruby-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.5.9-115.module+el8.10.0+24408+7ffaaa88
0:2.5.9-115.module+el8.10.0+24408+7ffaaa88
ruby-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.5.9-115.module+el8.10.0+24408+7ffaaa88
0:2.5.9-115.module+el8.10.0+24408+7ffaaa88
ruby-irb
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.5.9-115.module+el8.10.0+24408+7ffaaa88
0:2.5.9-115.module+el8.10.0+24408+7ffaaa88
ruby-libs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.5.9-115.module+el8.10.0+24408+7ffaaa88
0:2.5.9-115.module+el8.10.0+24408+7ffaaa88
ruby-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.5.9-115.module+el8.10.0+24408+7ffaaa88
0:2.5.9-115.module+el8.10.0+24408+7ffaaa88
rubygem-abrt
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.3.0-4.module+el8.10.0+22021+135c76a8
0:0.3.0-4.module+el8.10.0+22021+135c76a8
rubygem-abrt-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.3.0-4.module+el8.10.0+22021+135c76a8
0:0.3.0-4.module+el8.10.0+22021+135c76a8
rubygem-bigdecimal
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.3.4-115.module+el8.10.0+24408+7ffaaa88
0:1.3.4-115.module+el8.10.0+24408+7ffaaa88
rubygem-bigdecimal-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.3.4-115.module+el8.10.0+24408+7ffaaa88
0:1.3.4-115.module+el8.10.0+24408+7ffaaa88
rubygem-bson
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.3.0-2.module+el8.9.0+19193+435404ae
0:4.3.0-2.module+el8.9.0+19193+435404ae
rubygem-bson-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.3.0-2.module+el8.9.0+19193+435404ae
0:4.3.0-2.module+el8.9.0+19193+435404ae
rubygem-bson-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.3.0-2.module+el8.9.0+19193+435404ae
0:4.3.0-2.module+el8.9.0+19193+435404ae
rubygem-bson-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.3.0-2.module+el8.9.0+19193+435404ae
0:4.3.0-2.module+el8.9.0+19193+435404ae
rubygem-bundler
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.16.1-5.module+el8.10.0+23088+750dc6ca
0:1.16.1-5.module+el8.10.0+23088+750dc6ca
rubygem-bundler-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.16.1-5.module+el8.10.0+23088+750dc6ca
0:1.16.1-5.module+el8.10.0+23088+750dc6ca
rubygem-did_you_mean
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.2.0-115.module+el8.10.0+24408+7ffaaa88
0:1.2.0-115.module+el8.10.0+24408+7ffaaa88
rubygem-io-console
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.4.6-115.module+el8.10.0+24408+7ffaaa88
0:0.4.6-115.module+el8.10.0+24408+7ffaaa88
rubygem-io-console-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.4.6-115.module+el8.10.0+24408+7ffaaa88
0:0.4.6-115.module+el8.10.0+24408+7ffaaa88
ruby
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:3.0.7-167.el9_8
0:3.0.7-167.el9_8
rubygem-abrt
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.3.0-4.module+el8.5.0+738+032c9c02
0:0.3.0-4.module+el8.5.0+738+032c9c02
rubygem-abrt
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.3.0-4.module+el8.9.0+1536+5f79634e
0:0.3.0-4.module+el8.9.0+1536+5f79634e
rubygem-bson
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:4.3.0-2.module+el8.9.0+1536+5f79634e
0:4.3.0-2.module+el8.9.0+1536+5f79634e
rubygem-bundler
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.16.1-5.module+el8.10.0+1979+815637df
0:1.16.1-5.module+el8.10.0+1979+815637df
rubygem-mongo
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.5.1-2.module+el8.9.0+1536+5f79634e
0:2.5.1-2.module+el8.9.0+1536+5f79634e
rubygem-mysql2
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.4.10-4.module+el8.9.0+1536+5f79634e
0:0.4.10-4.module+el8.9.0+1536+5f79634e
rubygem-pg
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.0.0-3.module+el8.9.0+1536+5f79634e
0:1.0.0-3.module+el8.9.0+1536+5f79634e
rubygem-abrt
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:0.4.0-1.module+el8.9.0+1537+0b2034bd
0:0.4.0-1.module+el8.9.0+1537+0b2034bd
rubygem-abrt
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:0.4.0-1.module+el8.10.0+1679+61871737
0:0.4.0-1.module+el8.10.0+1679+61871737
rubygem-abrt
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:0.4.0-1.module+el8.10.0+1741+bdb5b6ca
0:0.4.0-1.module+el8.10.0+1741+bdb5b6ca
rubygem-abrt
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:0.4.0-1.module+el8.10.0+1827+16ecb9d2
0:0.4.0-1.module+el8.10.0+1827+16ecb9d2
rubygem-abrt
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:0.4.0-1.module+el8.5.0+668+665814fa
0:0.4.0-1.module+el8.5.0+668+665814fa
rubygem-abrt
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:0.4.0-1.module+el8.10.0+1820+f3fffb92
0:0.4.0-1.module+el8.10.0+1820+f3fffb92
rubygem-abrt
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:0.4.0-1.module+el8.10.0+1826+b62220b4
0:0.4.0-1.module+el8.10.0+1826+b62220b4
rubygem-mysql2
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:0.5.5-1.module+el8.10.0+1679+61871737
0:0.5.5-1.module+el8.10.0+1679+61871737
rubygem-mysql2
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:0.5.5-1.module+el8.10.0+1827+16ecb9d2
0:0.5.5-1.module+el8.10.0+1827+16ecb9d2
rubygem-pg
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:1.5.4-1.module+el8.10.0+1679+61871737
0:1.5.4-1.module+el8.10.0+1679+61871737
rubygem-pg
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:1.5.4-1.module+el8.10.0+1827+16ecb9d2
0:1.5.4-1.module+el8.10.0+1827+16ecb9d2
ruby4.0
Rocky Linux:10
From an advisory covering 3 CVEs
 before 0:4.0.3-35.el10_2
0:4.0.3-35.el10_2
ruby
Rocky Linux:10
From an advisory covering 3 CVEs
 before 0:3.3.10-13.el10_2
0:3.3.10-13.el10_2
rubygem-mysql2
Rocky Linux:9
From an advisory covering 3 CVEs
 before 0:0.5.5-3.module+el9.7.0+40032+36e56d0d
0:0.5.5-3.module+el9.7.0+40032+36e56d0d
rubygem-pg
Rocky Linux:9
From an advisory covering 3 CVEs
 before 0:1.5.4-2.module+el9.7.0+40188+314ad260.0.1
0:1.5.4-2.module+el9.7.0+40188+314ad260.0.1
rubygem-mysql2
Rocky Linux:9
From an advisory covering 3 CVEs
 before 0:0.5.7-1.module+el9.8.0+40094+ce01217c
0:0.5.7-1.module+el9.8.0+40094+ce01217c
rubygem-pg
Rocky Linux:9
From an advisory covering 3 CVEs
 before 0:1.6.3-1.module+el9.8.0+40094+ce01217c
0:1.6.3-1.module+el9.8.0+40094+ce01217c
net-imap
Root:Ruby
 before 0.3.4.1.41610.1
0.3.4.1.41610.1
hawk2
SUSE:Linux Enterprise High Availability Extension 16.0
From an advisory covering 7 CVEs
 before 2.7.2+git.1788518533.7d4dadd6-160000.1.1
2.7.2+git.1788518533.7d4dadd6-160000.1.1
hawk2
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 7 CVEs
 before 2.7.2+git.1788518533.7d4dadd6-160000.1.1
2.7.2+git.1788518533.7d4dadd6-160000.1.1
jruby
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
1.5.6-5ubuntu11.5.6-61.5.6-71.5.6-9+deb8u2build0.14.04.1~esm2
 None known
ruby2.3
Ubuntu:Pro:16.04:LTS
 before 2.3.1-2~ubuntu16.04.16+esm14, plus listed versions
2.3.0-12.3.0-22.3.0-4ubuntu22.3.0-4ubuntu32.3.0-5ubuntu1
Show 26 moreShow less
2.3.1-2~16.042.3.1-2~16.04.22.3.1-2~16.04.42.3.1-2~16.04.52.3.1-2~16.04.62.3.1-2~16.04.72.3.1-2~16.04.92.3.1-2~16.04.102.3.1-2~16.04.112.3.1-2~16.04.122.3.1-2~ubuntu16.04.132.3.1-2~ubuntu16.04.142.3.1-2~ubuntu16.04.152.3.1-2~ubuntu16.04.162.3.1-2~ubuntu16.04.16+esm12.3.1-2~ubuntu16.04.16+esm22.3.1-2~ubuntu16.04.16+esm32.3.1-2~ubuntu16.04.16+esm42.3.1-2~ubuntu16.04.16+esm52.3.1-2~ubuntu16.04.16+esm62.3.1-2~ubuntu16.04.16+esm72.3.1-2~ubuntu16.04.16+esm82.3.1-2~ubuntu16.04.16+esm92.3.1-2~ubuntu16.04.16+esm102.3.1-2~ubuntu16.04.16+esm112.3.1-2~ubuntu16.04.16+esm12
2.3.1-2~ubuntu16.04.16+esm14
jruby
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.7.21-2ubuntu41.7.22-1ubuntu1
 None known
ruby2.5
Ubuntu:Pro:18.04:LTS
 before 2.5.1-1ubuntu1.16+esm8, plus listed versions
2.5.0~preview1-1ubuntu22.5.0-4ubuntu12.5.0-4ubuntu42.5.0-5ubuntu12.5.0-6ubuntu1
Show 22 moreShow less
2.5.1-1ubuntu12.5.1-1ubuntu1.12.5.1-1ubuntu1.22.5.1-1ubuntu1.42.5.1-1ubuntu1.52.5.1-1ubuntu1.62.5.1-1ubuntu1.72.5.1-1ubuntu1.82.5.1-1ubuntu1.92.5.1-1ubuntu1.102.5.1-1ubuntu1.112.5.1-1ubuntu1.122.5.1-1ubuntu1.132.5.1-1ubuntu1.142.5.1-1ubuntu1.152.5.1-1ubuntu1.162.5.1-1ubuntu1.16+esm12.5.1-1ubuntu1.16+esm32.5.1-1ubuntu1.16+esm42.5.1-1ubuntu1.16+esm52.5.1-1ubuntu1.16+esm62.5.1-1ubuntu1.16+esm7
2.5.1-1ubuntu1.16+esm8
jruby
Ubuntu:18.04:LTS
 All versions, plus listed versions
9.1.13.0-19.1.17.0-1~18.04
 None known
ruby2.7
Ubuntu:Pro:20.04:LTS
 before 2.7.0-5ubuntu1.18+esm5, plus listed versions
2.7.0-12.7.0-22.7.0-32.7.0-42.7.0-4ubuntu1
Show 22 moreShow less
2.7.0-5ubuntu12.7.0-5ubuntu1.12.7.0-5ubuntu1.22.7.0-5ubuntu1.32.7.0-5ubuntu1.42.7.0-5ubuntu1.52.7.0-5ubuntu1.62.7.0-5ubuntu1.72.7.0-5ubuntu1.82.7.0-5ubuntu1.92.7.0-5ubuntu1.102.7.0-5ubuntu1.112.7.0-5ubuntu1.122.7.0-5ubuntu1.132.7.0-5ubuntu1.142.7.0-5ubuntu1.152.7.0-5ubuntu1.162.7.0-5ubuntu1.172.7.0-5ubuntu1.182.7.0-5ubuntu1.18+esm12.7.0-5ubuntu1.18+esm32.7.0-5ubuntu1.18+esm4
2.7.0-5ubuntu1.18+esm5
jruby
Ubuntu:20.04:LTS
 All versions, plus listed versions
9.1.17.0-39.1.17.0-3build59.1.17.0-3build6
 None known
ruby3.0
Ubuntu:22.04:LTS
 before 3.0.2-7ubuntu2.13, plus listed versions
3.0.2-5ubuntu13.0.2-73.0.2-7ubuntu23.0.2-7ubuntu2.13.0.2-7ubuntu2.2
Show 9 moreShow less
3.0.2-7ubuntu2.33.0.2-7ubuntu2.43.0.2-7ubuntu2.53.0.2-7ubuntu2.63.0.2-7ubuntu2.73.0.2-7ubuntu2.83.0.2-7ubuntu2.103.0.2-7ubuntu2.113.0.2-7ubuntu2.12
3.0.2-7ubuntu2.13
jruby
Ubuntu:24.04:LTS
 All versions, plus listed versions
9.3.9.0+ds-19.4.5.0+ds-19.4.5.0+ds-1ubuntu19.4.6.0+ds-1ubuntu3
 None known
ruby3.2
Ubuntu:24.04:LTS
 before 3.2.3-1ubuntu0.24.04.8, plus listed versions
3.2.3-13.2.3-1build23.2.3-1build33.2.3-1ubuntu0.24.04.13.2.3-1ubuntu0.24.04.33.2.3-1ubuntu0.24.04.53.2.3-1ubuntu0.24.04.63.2.3-1ubuntu0.24.04.7
3.2.3-1ubuntu0.24.04.8
jruby
Ubuntu:25.10
 All versions, plus listed versions
9.4.8.0+ds-2ubuntu19.4.8.0+ds-3ubuntu1
 None known
ruby3.3
Ubuntu:25.10
 All versions, plus listed versions
3.3.7-1ubuntu23.3.8-2ubuntu13.3.8-2ubuntu23.3.8-2ubuntu2.1
 None known
jruby
Ubuntu:26.10
 All versions, plus listed versions
9.4.8.0+ds-3ubuntu19.4.14.0+ds-1
 None known
jruby
Ubuntu:26.04:LTS
 All versions, plus listed versions
9.4.8.0+ds-3ubuntu1
 None known
ruby3.3
Ubuntu:26.04:LTS
 before 3.3.8-2ubuntu3.1, plus listed versions
3.3.8-2ubuntu23.3.8-2ubuntu3
3.3.8-2ubuntu3.1
hawk2
openSUSE:Tumbleweed
From an advisory covering 7 CVEs
 before 2.7.2+git.1792148770.648dcddb-1.1
2.7.2+git.1792148770.648dcddb-1.1
hawk2
openSUSE:Leap 16.0
From an advisory covering 7 CVEs
 before 2.7.2+git.1788518533.7d4dadd6-160000.1.1
2.7.2+git.1788518533.7d4dadd6-160000.1.1

History

History
RecordedChangedSources
affectedOSV
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-42246 is a high vulnerability (CVSS 7.6) in Ruby Net-imap, published June 29, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.31%, the 24th percentile. Fixed in net-imap 0.6.4.

References

Show 171 moreShow less
This page doesn't list everything

Left out here: 862 package rows. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 4 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open