Login Request a demo
NE
Product
net-imap
by ruby · last CVE Jun 22, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 1High 2Medium 4Low 1
Severity
All severities8Critical1High2Medium4Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add net-imap to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-42257
9.8
0%
May 9
net-imap: Command Injection via "raw" arguments to multiple commands
Affected: < 0.4.24; >= 0.5.0, < 0.5.14; >= 0.6.0, < 0.6.4
CVE-2026-42245
7.5
0%
May 9
net-imap: Quadratic complexity when reading response literals
Affected: < 0.4.24; >= 0.5.0, < 0.5.14; >= 0.6.0, < 0.6.4
CVE-2026-42246
7.4
0%
May 9
net-imap vulnerable to STARTTLS stripping via invalid response timing
Affected: < 0.3.10; >= 0.4.0, < 0.4.24; >= 0.5.0, < 0.5.14; >= 0.6.0, < 0.6.4
CVE-2026-42256
6.5
0%
May 9
net-imap: Denial of service via high iteration count for `SCRAM-*` authentication
Affected: >= 0.4.0, < 0.4.24; >= 0.5.0, < 0.5.14; >= 0.6.0, < 0.6.4
CVE-2026-47242
5.8
0%
Jun 22
Net::IMAP: Command Injection via ID command argument
Affected: >= 0.6.0, < 0.6.4.1; < 0.5.15
CVE-2026-47240
5.8
1%
Jun 22
Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument
Affected: >= 0.6.0, < 0.6.4.1; < 0.5.15
CVE-2026-42258
5.3
1%
May 9
net-imap: Command Injection via unvalidated Symbol inputs
Affected: < 0.4.24; >= 0.5.0, < 0.5.14; >= 0.6.0, < 0.6.4
CVE-2026-47241
2.1
0%
Jun 22
Net::IMAP: Denial of Service via incomplete raw argument validation
Affected: >= 0.6.0, < 0.6.4.1; < 0.5.15
Showing 8