Oracle Linux 10 : ruby (ELSA-2026-50778)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50778 advisory. 3.3.12-14 - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 Tenable has extracted the preceding description block directly from t...

Oracle Linux 10 : ruby4.0 (ELSA-2026-50773)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50773 advisory. 4.0.6-36 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211310 Resolves: RHEL-193660 Tenable has extracted the preceding description block directly from the...

USN-8431-1 ruby2.3, ruby2.5 vulnerabilities

It was discovered that Ruby's Net::IMAP library did not properly verify that Transport Layer Security TLS encryption was started after issuing a STARTTLS command. A remote attacker could possibly use this issue to perform a machine-in-the-middle attack and silently bypass TLS encryption...

Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument

Several Net::IMAP commands accept a "raw data" argument that is sent verbatim after validation to prevent command injection. However, if a server does not support non-synchronizing literals, it may still be possible to inject arbitrary IMAP commands inside non-synchronizing literals. Details Raw...

Linux Distros Unpatched Vulnerability : CVE-2026-42257

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, several Net::IMAP commands...

CVE-2026-42257

creationtimestamp| type| source ---|---|--- 2026-05-09 21:40:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh7iqqghk2r 2026-05-10 12:01:25+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mliplujde42d 2026-07-18 12:01:11+00:00| seen|...

CVE-2026-42257 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, ruby3.4-net-imap, ruby3.3-rails, jruby, logstash, ruby3.3-net-imap, ruby3.2-net-imap, ruby4.0-rails, ruby4.0-net-imap, ruby3.4-rails, ruby3.2-rails...

CVE-2026-42257 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, ruby3.4-net-imap, ruby3.2-net-imap, logstash-fips, ruby3.3-net-imap, gitlab-rails-ce, logstash, ruby3.4-rails, kube-logging-operator, jruby, ruby4.0-rails, ruby3.2-rails, truffleruby, ruby4.0-net-imap, kube-fluentd-operator, gitlab-rails-ce-fips...