19324 matches found
CVE-2026-47241 Net::IMAP: Denial of Service via incomplete raw argument validation
Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a raw string argument which is only validated to prevent CRLF injection and then sent verbatim. If this string is derived from user-controlled inpu...
CVE-2026-47241 Net::IMAP: Denial of Service via incomplete raw argument validation
Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a raw string argument which is only validated to prevent CRLF injection and then sent verbatim. If this string is derived from user-controlled inpu...
CVE-2026-47241
Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a raw string argument which is only validated to prevent CRLF injection and then sent verbatim. If this string is derived from user-controlled inpu...
Security Bulletin: Vulnerability in Ruby affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.
Summary Potential vulnerability in Ruby has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information. Vulnerability...
OPENSUSE-SU-2026:20998-1 Security update for tree-sitter-ruby
This update for tree-sitter-ruby fixes the following issues - CVE-2025-5889: brace-expansion: inefficient regular expression complexity in function expand of file index.js bsc1244345. - CVE-2025-59343: tar-fs: tar-fs symlink validation bypass bsc1250517. Changes for tree-sitter-ruby: - Use correc...
CVE-2026-47241: Improper Neutralization of Trailing Special Elements
Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a raw string argument which is only validated to prevent CRLF injection and then sent verbatim. If this string is derived from user-controlled inpu...
CVE-2026-47240: Improper Neutralization of Special Elements used in a Command
Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a "raw data" argument that is sent verbatim after validation to prevent command injection. However, if a server does not support non-synchronizing...
CVE-2026-47242: Improper Neutralization of Special Elements used in a Command
Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, when Net::IMAPid is called with a hash argument, although the ID field value strings are correctly quoted escaping quoted specials, they were not validated to prohibit CRLF sequence...
GHSA-5V8H-3H3Q-446P vulnerabilities
Vulnerabilities for packages: logstash, kube-logging-operator, ruby3.4-rails, ruby3.2-rails...
GHSA-WJV4-X9W8-WM3H vulnerabilities
Vulnerabilities for packages: logstash, kube-logging-operator, ruby3.4-rails, ruby3.2-rails...
GHSA-5PRR-V3J2-97MH vulnerabilities
Vulnerabilities for packages: logstash, kube-logging-operator, ruby3.4-rails, ruby3.2-rails...
GHSA-9CV2-CFXC-V4V2 vulnerabilities
Vulnerabilities for packages: logstash, kube-logging-operator, ruby3.4-rails, ruby3.2-rails...
GHSA-P67V-3W7G-WJG7 vulnerabilities
Vulnerabilities for packages: logstash, kube-logging-operator, ruby3.4-rails, ruby3.2-rails...
GHSA-PHWJ-RPRQ-35PP vulnerabilities
Vulnerabilities for packages: logstash, kube-logging-operator, ruby3.4-rails, ruby3.2-rails...
GHSA-WFPW-MMFH-QQ69 vulnerabilities
Vulnerabilities for packages: logstash, kube-logging-operator, ruby3.4-rails, ruby3.2-rails...
CVE-2026-54906 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, cinc-auditor, logstash, kube-fluentd-operator, ruby3.2-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.3-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-rails, ruby3.4-fluentd-kubernetes-daemonset...
GHSA-H8W8-99G7-QMVJ vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, cinc-auditor, logstash, kube-fluentd-operator, ruby3.2-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.3-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-rails, ruby3.4-fluentd-kubernetes-daemonset...
CVE-2026-54904 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, cinc-auditor, logstash, kube-fluentd-operator, ruby3.2-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.3-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-rails, ruby3.4-fluentd-kubernetes-daemonset...
CVE-2026-54905 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, cinc-auditor, logstash, kube-fluentd-operator, ruby3.2-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.3-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-rails, ruby3.4-fluentd-kubernetes-daemonset...
GHSA-WV3X-4VXV-WHPP vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, cinc-auditor, logstash, kube-fluentd-operator, ruby3.2-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.3-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-rails, ruby3.4-fluentd-kubernetes-daemonset...