Ruby Net-imap vulnerabilities

• ruby net-imap Net::IMAP: Command Injection via ID command argument CVE-2026-47242 Fix available 5.8 MediumJune 9, 2026
• ruby net-imap Net::IMAP: Denial of Service via incomplete raw argument validation CVE-2026-47241 Fix available 2.1 LowJune 9, 2026
• ruby net-imap Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument CVE-2026-47240 Fix available 5.8 MediumJune 9, 2026
• ruby net-imap, ruby-lang net\ +1 more net-imap: Command Injection via "raw" arguments to multiple commands CVE-2026-42257 Fix available 5.8 MediumMay 4, 2026
• ruby net-imap, red hat 3scale api management platform 2, enterprise linux 10 +19 more +21 more net-imap: Command Injection via unvalidated Symbol inputs CVE-2026-42258 Fix available 5.8 MediumMay 4, 2026
• ruby net-imap, ruby-lang net\ +1 more net-imap: Denial of service via high iteration count for `SCRAM-*` authentication CVE-2026-42256 Fix available 6.0 MediumMay 4, 2026
• ruby net-imap, ruby-lang net\ +1 more net-imap: Quadratic complexity when reading response literals CVE-2026-42245 Fix available 2.3 LowMay 4, 2026
• ruby net-imap, red hat 3scale api management platform 2, enterprise linux 10 +17 more +19 more net-imap vulnerable to STARTTLS stripping via invalid response timing CVE-2026-42246 Fix available 7.6 HighJune 29, 2025
• ruby net-imap, ruby-lang net\ +1 more net-imap rubygem vulnerable to possible DoS by memory exhaustion CVE-2025-43857 Fix available 6.0 MediumApril 28, 2025
• ruby net-imap Net::IMAP vulnerable to possible DoS by memory exhaustion CVE-2025-25186 Fix available 6.5 MediumFebruary 10, 2025