CVE-2026-42257 vulnerabilities

Vulnerabilities for packages: ruby3.2-net-imap, kube-fluentd-operator, ruby4.0-rails, logstash, ruby3.3-rails, ruby3.4-rails, jruby, kube-logging-operator, ruby3.2-rails, ruby3.3-net-imap, ruby3.4-net-imap, ruby4.0-net-imap...

GHSA-HM49-WCQC-G2XG vulnerabilities

Vulnerabilities for packages: ruby3.2-net-imap, kube-fluentd-operator, ruby4.0-rails, logstash, ruby3.3-rails, ruby3.4-rails, jruby, kube-logging-operator, ruby3.2-rails, ruby3.3-net-imap, ruby3.4-net-imap, ruby4.0-net-imap...

GHSA-VCGP-9326-PQCP vulnerabilities

Vulnerabilities for packages: ruby3.2-net-imap, kube-fluentd-operator, ruby4.0-rails, logstash, ruby3.3-rails, ruby3.4-rails, jruby, kube-logging-operator, ruby3.2-rails, ruby3.3-net-imap, ruby3.4-net-imap, ruby4.0-net-imap...

GHSA-75XQ-5H9V-W6PX vulnerabilities

Vulnerabilities for packages: ruby3.2-net-imap, kube-fluentd-operator, ruby4.0-rails, logstash, ruby3.3-rails, ruby3.4-rails, jruby, kube-logging-operator, ruby3.2-rails, ruby3.3-net-imap, ruby3.4-net-imap, ruby4.0-net-imap...

GHSA-Q2MW-FVJ9-VVCW vulnerabilities

Vulnerabilities for packages: logstash-fips, gitlab-rails-ce-fips, kube-fluentd-operator, ruby3.4-net-imap, ruby4.0-rails, truffleruby, ruby3.2-net-imap, logstash, ruby3.2-rails, gitlab-rails-ce, ruby4.0-net-imap, jruby, ruby3.3-rails, kube-logging-operator, ruby3.4-rails, ruby3.3-net-imap...

GHSA-HM49-WCQC-G2XG vulnerabilities

Vulnerabilities for packages: logstash-fips, gitlab-rails-ce-fips, kube-fluentd-operator, ruby3.4-net-imap, ruby4.0-rails, truffleruby, ruby3.2-net-imap, logstash, ruby3.2-rails, gitlab-rails-ce, ruby4.0-net-imap, jruby, ruby3.3-rails, kube-logging-operator, ruby3.4-rails, ruby3.3-net-imap...

GHSA-VCGP-9326-PQCP vulnerabilities

Vulnerabilities for packages: logstash-fips, gitlab-rails-ce-fips, kube-fluentd-operator, ruby3.4-net-imap, ruby4.0-rails, truffleruby, ruby3.2-net-imap, logstash, ruby3.2-rails, gitlab-rails-ce, ruby4.0-net-imap, jruby, ruby3.3-rails, kube-logging-operator, ruby3.4-rails, ruby3.3-net-imap...

CVE-2026-42245 vulnerabilities

Vulnerabilities for packages: logstash-fips, gitlab-rails-ce-fips, kube-fluentd-operator, ruby3.4-net-imap, ruby4.0-rails, truffleruby, ruby3.2-net-imap, logstash, ruby3.2-rails, gitlab-rails-ce, ruby4.0-net-imap, jruby, ruby3.3-rails, kube-logging-operator, ruby3.4-rails, ruby3.3-net-imap...

CVE-2026-42256 vulnerabilities

Vulnerabilities for packages: logstash-fips, gitlab-rails-ce-fips, ruby3.4-net-imap, ruby4.0-rails, truffleruby, ruby3.2-net-imap, logstash, ruby3.2-rails, gitlab-rails-ce, ruby4.0-net-imap, jruby, ruby3.3-rails, kube-logging-operator, ruby3.4-rails, ruby3.3-net-imap...

CVE-2026-42246 vulnerabilities

Vulnerabilities for packages: logstash-fips, gitlab-rails-ce-fips, kube-fluentd-operator, ruby3.4-net-imap, ruby4.0-rails, truffleruby, ruby3.2-net-imap, logstash, ruby3.2-rails, gitlab-rails-ce, ruby4.0-net-imap, jruby, ruby3.3-rails, kube-logging-operator, ruby3.4-rails, ruby3.3-net-imap...

CVE-2026-42258 vulnerabilities

Vulnerabilities for packages: logstash-fips, gitlab-rails-ce-fips, kube-fluentd-operator, ruby3.4-net-imap, ruby4.0-rails, truffleruby, ruby3.2-net-imap, logstash, ruby3.2-rails, gitlab-rails-ce, ruby4.0-net-imap, jruby, ruby3.3-rails, kube-logging-operator, ruby3.4-rails, ruby3.3-net-imap...

CVE-2026-42257 vulnerabilities

Vulnerabilities for packages: logstash-fips, gitlab-rails-ce-fips, kube-fluentd-operator, ruby3.4-net-imap, ruby4.0-rails, truffleruby, ruby3.2-net-imap, logstash, ruby3.2-rails, gitlab-rails-ce, ruby4.0-net-imap, jruby, ruby3.3-rails, kube-logging-operator, ruby3.4-rails, ruby3.3-net-imap...

GHSA-75XQ-5H9V-W6PX vulnerabilities

Vulnerabilities for packages: logstash-fips, gitlab-rails-ce-fips, kube-fluentd-operator, ruby3.4-net-imap, ruby4.0-rails, truffleruby, ruby3.2-net-imap, logstash, ruby3.2-rails, gitlab-rails-ce, ruby4.0-net-imap, jruby, ruby3.3-rails, kube-logging-operator, ruby3.4-rails, ruby3.3-net-imap...

GraphQL-Ruby's Ruby lexer does not count comment tokens for the purposes of max_query_string_tokens

GraphQL-Ruby's maxquerystringtokens configuration didn't count comment tokens against the limit, allowing strings to be processed even after the configured maximum had actually been reached. In patched versions, the Ruby lexer does count these tokens. GraphQL-CParser is not affected by this...

Allocation of Resources Without Limits or Throttling

Overview graphql is a plain-Ruby implementation of GraphQL. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to improper counting of comment tokens in the maxquerystringtokens configuration. An attacker can cause excessive resource...

GHSA-3H96-34P3-XM76 GraphQL-Ruby's Ruby lexer does not count comment tokens for the purposes of max_query_string_tokens

GraphQL-Ruby's maxquerystringtokens configuration didn't count comment tokens against the limit, allowing strings to be processed even after the configured maximum had actually been reached. In patched versions, the Ruby lexer does count these tokens. GraphQL-CParser is not affected by this...

Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex

Summary Multiple vulnerabilities were addressed in IBM Aspera Faspex 5.0.15.2 Vulnerability Details CVEID:CVE-2026-40895 DESCRIPTION: follow-redirects is an open source, drop-in replacement for Node's http and https modules that automatically follows redirects. Prior to 1.16.0, when an HTTP reque...

GHSA-87PF-FPWV-P7M7 net-imap vulnerable to denial of service via high iteration count for `SCRAM-*` authentication

Summary When authenticating a connection with SCRAM-SHA1 or SCRAM-SHA256, a hostile server can perform a computational denial-of-service attack on the client process by sending a big iteration count value. Details A hostile IMAP server can send an arbitrarily large PBKDF2 iteration count in the...

net-imap vulnerable to denial of service via high iteration count for `SCRAM-*` authentication

Summary When authenticating a connection with SCRAM-SHA1 or SCRAM-SHA256, a hostile server can perform a computational denial-of-service attack on the client process by sending a big iteration count value. Details A hostile IMAP server can send an arbitrarily large PBKDF2 iteration count in the...

net-imap vulnerable to denial of service via high iteration count for `SCRAM-*` authentication

Summary When authenticating a connection with SCRAM-SHA1 or SCRAM-SHA256, a hostile server can perform a computational denial-of-service attack on the client process by sending a big iteration count value. Details A hostile IMAP server can send an arbitrarily large PBKDF2 iteration count in the...