Amazon Linux 2023 : ruby4.0, ruby4.0-bundled-gems, ruby4.0-default-gems (ALAS2023-2026-1806)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1806 advisory. Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can cause...

BELL-CVE-2026-42258

Bulletin has no description...

CVE-2026-42258

Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, symbol arguments to commands are vulnerable to a CRLF Injection / IMAP Command injection via Symbol arguments passed to IMAP commands. This issue has been patched ...

CVE-2026-42258 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.3-rails, ruby3.3-net-imap, ruby3.2-net-imap, ruby3.4-rails, ruby4.0-net-imap, ruby3.2-rails, ruby3.4-net-imap, kube-fluentd-operator, ruby4.0-rails, logstash...