19094 matches found
CVE-2026-63263 vulnerabilities
Vulnerabilities for packages: ruby3.2-elasticsearch, ruby4.0-elasticsearch, ruby3.3-elasticsearch, ruby3.4-elasticsearch...
GHSA-5V5G-HVW6-X2X7 vulnerabilities
Vulnerabilities for packages: ruby3.2-elasticsearch, ruby4.0-elasticsearch, ruby3.3-elasticsearch, ruby3.4-elasticsearch...
CVE-2026-56144 vulnerabilities
Vulnerabilities for packages: ruby3.2-elasticsearch, ruby4.0-elasticsearch, ruby3.3-elasticsearch, ruby3.4-elasticsearch...
CVE-2026-56145 vulnerabilities
Vulnerabilities for packages: ruby3.2-elasticsearch, ruby4.0-elasticsearch, ruby3.3-elasticsearch, ruby3.4-elasticsearch...
ruby/net-imap: ruby: Net::IMAP: Denial of Service via large iteration count in SCRAM authentication
A flaw was found in Net::IMAP, a Ruby library for Internet Message Access Protocol IMAP client functionality. A hostile server can exploit this vulnerability during SCRAM-SHA1 or SCRAM-SHA256 Salted Challenge Response Authentication Mechanism - Secure Hash Algorithm 1 or 256 authentication by...
net-imap: rubygem-net-imap: Net::IMAP: Denial of Service via malformed command input
A flaw was found in Net::IMAP, a Ruby client library for the Internet Message Access Protocol IMAP. This vulnerability allows a remote attacker to cause a denial of service by sending specially crafted input to certain Net::IMAP commands. When a raw string argument, derived from user-controlled...
Important: Red Hat Security Advisory: ruby:4.0 security, bug fix, and enhancement update
An update for the ruby:4.0 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
net-imap: Net::IMAP: Arbitrary IMAP command injection due to improper input validation
A flaw was found in Net::IMAP, a Ruby library that implements Internet Message Access Protocol IMAP client functionality. This vulnerability arises from improper input validation when handling ID field values and arguments to the enable command. A remote attacker could exploit this by injecting...
net-imap: Net::IMAP: Command injection via non-synchronizing literals
A flaw was found in Net::IMAP, a Ruby library that provides Internet Message Access Protocol IMAP client functionality. This vulnerability allows a remote attacker to inject arbitrary IMAP commands. This is possible when an IMAP server does not support non-synchronizing literals, leading to the...
net-imap: Net::IMAP: Command injection via non-synchronizing literals
A flaw was found in Net::IMAP, a Ruby library that provides Internet Message Access Protocol IMAP client functionality. This vulnerability allows a remote attacker to inject arbitrary IMAP commands. This is possible when an IMAP server does not support non-synchronizing literals, leading to the...
ruby/net-imap: ruby: Net::IMAP: Denial of Service via large iteration count in SCRAM authentication
A flaw was found in Net::IMAP, a Ruby library for Internet Message Access Protocol IMAP client functionality. A hostile server can exploit this vulnerability during SCRAM-SHA1 or SCRAM-SHA256 Salted Challenge Response Authentication Mechanism - Secure Hash Algorithm 1 or 256 authentication by...
zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader
A flaw was found in zlib, a Ruby interface for the zlib compression/decompression library. The Zlib::GzipReader component contains a buffer overflow vulnerability. This occurs because the zstreambufferungets function does not ensure sufficient memory capacity before moving existing data, which ca...
net-imap: rubygem-net-imap: Net::IMAP: Denial of Service via malformed command input
A flaw was found in Net::IMAP, a Ruby client library for the Internet Message Access Protocol IMAP. This vulnerability allows a remote attacker to cause a denial of service by sending specially crafted input to certain Net::IMAP commands. When a raw string argument, derived from user-controlled...
net-imap: Net::IMAP: Arbitrary IMAP command injection due to improper input validation
A flaw was found in Net::IMAP, a Ruby library that implements Internet Message Access Protocol IMAP client functionality. This vulnerability arises from improper input validation when handling ID field values and arguments to the enable command. A remote attacker could exploit this by injecting...
Important: Red Hat Security Advisory: ruby:3.3 security, bug fix, and enhancement update
An update for the ruby:3.3 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
ROOT-APP-RUBY-CVE-2026-54902 CVE-2026-54902 in oj - Patched by Root
Root has patched CVE-2026-54902 in the oj package for Root:Ruby. Multiple fixed versions available...
net-imap: Net::IMAP: Arbitrary IMAP command injection due to improper input validation
A flaw was found in Net::IMAP, a Ruby library that implements Internet Message Access Protocol IMAP client functionality. This vulnerability arises from improper input validation when handling ID field values and arguments to the enable command. A remote attacker could exploit this by injecting...
zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader
A flaw was found in zlib, a Ruby interface for the zlib compression/decompression library. The Zlib::GzipReader component contains a buffer overflow vulnerability. This occurs because the zstreambufferungets function does not ensure sufficient memory capacity before moving existing data, which ca...
net-imap: Net::IMAP: Command injection via non-synchronizing literals
A flaw was found in Net::IMAP, a Ruby library that provides Internet Message Access Protocol IMAP client functionality. This vulnerability allows a remote attacker to inject arbitrary IMAP commands. This is possible when an IMAP server does not support non-synchronizing literals, leading to the...
net-imap: rubygem-net-imap: Net::IMAP: Denial of Service via malformed command input
A flaw was found in Net::IMAP, a Ruby client library for the Internet Message Access Protocol IMAP. This vulnerability allows a remote attacker to cause a denial of service by sending specially crafted input to certain Net::IMAP commands. When a raw string argument, derived from user-controlled...