RubyGems net-imap

Name: RubyGems net-imap
Brand: RubyGems

productUS

pkg:gem/net-imap

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

by severity

1critical2high3medium0low

updated 2026-10-28

vulnerabilities (10)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-47240US	—	0.83% (57th)	—	0.5.15	2026-06-22	2 versions
CVE-2026-42258US	medium5.3	0.78% (56th)	—	0.5.14	2026-05-09	3 versions
CVE-2025-25186US	—	0.63% (50th)	—	0.5.6	2025-02-10	3 versions
CVE-2025-43857US	medium6.5	0.49% (42nd)	—	0.4.20	2025-04-28	4 versions
CVE-2026-42257US	critical9.8	0.43% (37th)	—	0.5.14	2026-05-09	3 versions
CVE-2026-42245US	high7.5	0.41% (35th)	—	0.5.14	2026-05-09	3 versions
CVE-2026-47241US	—	0.38% (32nd)	—	0.5.15	2026-06-22	2 versions
CVE-2026-42246US	high7.4	0.31% (24th)	—	0.3.10	2026-05-09	4 versions
CVE-2026-42256US	medium6.5	0.30% (22nd)	—	0.6.4	2026-05-09	3 versions
CVE-2026-47242US	—	0.18% (8th)	—	0.6.4.1	2026-06-22	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')4 CVEs
CWE-93Improper Neutralization of CRLF Sequences ('CRLF Injection')4 CVEs
CWE-770Allocation of Resources Without Limits or Throttling3 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-405Asymmetric Resource Consumption (Amplification)2 CVEs
CWE-789Memory Allocation with Excessive Size Value2 CVEs
CWE-1287Improper Validation of Specified Type of Input1 CVEs
CWE-1322Use of Blocking Code in Single-threaded, Non-blocking Context1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.