net-imap — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in net-imap, with AI-generated Chinese analysis, references, and POCs.

Vendor: ruby

CVE ID	Title	CVSS	Severity	Published
CVE-2026-47242	Net::IMAP: Command Injection via ID command argument CWE-77	-	-	2026-06-22
CVE-2026-47240	Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument CWE-77	-	-	2026-06-22
CVE-2026-47241	Net::IMAP: Denial of Service via incomplete raw argument validation CWE-162	-	-	2026-06-22
CVE-2026-42258	net-imap: Command Injection via unvalidated Symbol inputs CWE-77	5.8	Medium	2026-05-09
CVE-2026-42257	net-imap: Command Injection via "raw" arguments to multiple commands CWE-93	6.5	-	2026-05-09
CVE-2026-42256	net-imap: Denial of service via high iteration count for `SCRAM-*` authentication CWE-1322	6.5	-	2026-05-09
CVE-2026-42245	net-imap: Quadratic complexity when reading response literals CWE-407	7.5	-	2026-05-09
CVE-2026-42246	net-imap vulnerable to STARTTLS stripping via invalid response timing CWE-392	7.6	High	2026-05-09
CVE-2025-43857	net-imap rubygem vulnerable to possible DoS by memory exhaustion CWE-400	7.5^AI	High ^AI	2025-04-28
CVE-2025-25186	Net::IMAP vulnerable to possible DoS by memory exhaustion CWE-400	6.5	Medium	2025-02-10

All 10 known CVE vulnerabilities affecting net-imap with full Chinese analysis, references, and POCs where available.