NE
Product
Net::imap
by Ruby-lang · last CVE May 9, 2026
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 3Low 0
Watch

Add Net::imap to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-42245
7.5
0%
May 9
net-imap: Quadratic complexity when reading response literals
Affected: before 0.4.24; 0.5.0 before 0.5.14; 0.6.0 before 0.6.4
CVE-2026-42246
7.4
0%
May 9
net-imap vulnerable to STARTTLS stripping via invalid response timing
Affected: before 0.3.10; 0.4.0 before 0.4.24; 0.5.0 before 0.5.14; 0.6.0 before 0.6.4
Showing 2