CVE-2026-54906 vulnerabilities

Vulnerabilities for packages: ruby3.3-fluentd-kubernetes-daemonset, ruby3.3-rails, ruby3.2-fluentd-kubernetes-daemonset, ruby3.2-rails, kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset, kube-fluentd-operator, ruby4.0-rails, ruby3.4-fluentd-kubernetes-daemonset, ruby3.4-rails...

GHSA-WJV4-X9W8-WM3H vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, pact-broker-docker-fips, ruby3.2-rails, pact-broker-docker, logstash-fips, kube-logging-operator, gitlab-rails-ce, ruby4.0-rails, logstash, ruby3.4-rails...

GHSA-P67V-3W7G-WJG7 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, pact-broker-docker-fips, ruby3.2-rails, pact-broker-docker, logstash-fips, kube-logging-operator, gitlab-rails-ce, ruby4.0-rails, logstash, ruby3.4-rails...

GHSA-5PRR-V3J2-97MH vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, pact-broker-docker-fips, ruby3.2-rails, pact-broker-docker, logstash-fips, kube-logging-operator, gitlab-rails-ce, ruby4.0-rails, logstash, ruby3.4-rails...

CVE-2026-54905 vulnerabilities

Vulnerabilities for packages: ruby3.3-fluentd-kubernetes-daemonset, ruby3.3-rails, ruby3.2-fluentd-kubernetes-daemonset, ruby3.2-rails, kube-logging-operator, ruby4.0-fluentd-kubernetes-daemonset, kube-fluentd-operator, ruby4.0-rails, ruby3.4-fluentd-kubernetes-daemonset, ruby3.4-rails...

GHSA-9CV2-CFXC-V4V2 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, pact-broker-docker-fips, ruby3.2-rails, pact-broker-docker, logstash-fips, kube-logging-operator, gitlab-rails-ce, ruby4.0-rails, logstash, ruby3.4-rails...

CVE-2026-54297 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, logstash-fips, kube-logging-operator, cinc-auditor, kube-fluentd-operator, gitlab-cng, gitlab-rails-ce, ruby3.3-faraday, logstash...

GHSA-98M9-HRRM-R99R vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, logstash-fips, kube-logging-operator, cinc-auditor, kube-fluentd-operator, gitlab-cng, gitlab-rails-ce, ruby3.3-faraday, logstash...

CVE-2026-47240

Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a "raw data" argument that is sent verbatim after validation to prevent command injection. However, if a server does not support non-synchronizing...

CVE-2026-47242

Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, when Net::IMAPid is called with a hash argument, although the ID field value strings are correctly quoted escaping quoted specials, they were not validated to prohibit CRLF sequence...

DEBIAN-CVE-2026-47242

Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, when Net::IMAPid is called with a hash argument, although the ID field value strings are correctly quoted escaping quoted specials, they were not validated to prohibit CRLF sequence...

CVE-2026-47241

Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a raw string argument which is only validated to prevent CRLF injection and then sent verbatim. If this string is derived from user-controlled inpu...

UBUNTU-CVE-2026-47242

Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, when Net::IMAPid is called with a hash argument, although the ID field value strings are correctly quoted escaping quoted specials, they were not validated to prohibit CRLF sequence...

UBUNTU-CVE-2026-47241

Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a raw string argument which is only validated to prevent CRLF injection and then sent verbatim. If this string is derived from user-controlled inpu...

CVE-2026-47240

Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a "raw data" argument that is sent verbatim after validation to prevent command injection. However, if a server does not support non-synchronizing...

CVE-2026-47242 Net::IMAP: Command Injection via ID command argument

Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, when Net::IMAPid is called with a hash argument, although the ID field value strings are correctly quoted escaping quoted specials, they were not validated to prohibit CRLF sequence...

CVE-2026-47242 Net::IMAP: Command Injection via ID command argument

Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, when Net::IMAPid is called with a hash argument, although the ID field value strings are correctly quoted escaping quoted specials, they were not validated to prohibit CRLF sequence...

CVE-2026-47242

Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, when Net::IMAPid is called with a hash argument, although the ID field value strings are correctly quoted escaping quoted specials, they were not validated to prohibit CRLF sequence...

CVE-2026-47242

Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, when Net::IMAPid is called with a hash argument, although the ID field value strings are correctly quoted escaping quoted specials, they were not validated to prohibit CRLF sequence...

CVE-2026-47242

Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, when Net::IMAPid is called with a hash argument, although the ID field value strings are correctly quoted escaping quoted specials, they were not validated to prohibit CRLF sequence...