19510 matches found
GHSA-H8W8-99G7-QMVJ vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, ruby3.4-rails, ruby3.2-rails, logstash, kube-logging-operator, logstash-fips, ruby3.2-fluentd-kubernetes-daemonset, ruby4.0-rails, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.3-rails,...
GHSA-5V8H-3H3Q-446P vulnerabilities
Vulnerabilities for packages: pact-broker-docker-fips, pact-broker-docker, gitlab-rails-ce, ruby3.4-rails, ruby3.2-rails, logstash, kube-logging-operator, logstash-fips, ruby4.0-rails, ruby3.3-rails, commercial-gitlab-rails-ee...
GHSA-8678-W3JW-XFC2 vulnerabilities
Vulnerabilities for packages: pact-broker-docker-fips, pact-broker-docker, gitlab-rails-ce, ruby3.4-rails, ruby3.2-rails, logstash, kube-logging-operator, logstash-fips, ruby4.0-rails, ruby3.3-rails, commercial-gitlab-rails-ee...
GHSA-WFPW-MMFH-QQ69 vulnerabilities
Vulnerabilities for packages: pact-broker-docker-fips, pact-broker-docker, gitlab-rails-ce, ruby3.4-rails, ruby3.2-rails, logstash, kube-logging-operator, logstash-fips, ruby4.0-rails, ruby3.3-rails, commercial-gitlab-rails-ee...
GHSA-WV3X-4VXV-WHPP vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, ruby3.4-rails, ruby3.2-rails, logstash, kube-logging-operator, logstash-fips, ruby3.2-fluentd-kubernetes-daemonset, ruby4.0-rails, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.3-rails,...
CVE-2026-54297 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, kube-fluentd-operator, gitlab-rails-ce-fips, gitlab-cng, kube-logging-operator, logstash, logstash-fips, cinc-auditor, ruby3.3-faraday...
GHSA-98M9-HRRM-R99R vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, kube-fluentd-operator, gitlab-rails-ce-fips, gitlab-cng, kube-logging-operator, logstash, logstash-fips, cinc-auditor, ruby3.3-faraday...
ALPINE-CVE-2026-47240
Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a "raw data" argument that is sent verbatim after validation to prevent command injection. However, if a server does not support non-synchronizing...
DEBIAN-CVE-2026-47242
Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, when Net::IMAPid is called with a hash argument, although the ID field value strings are correctly quoted escaping quoted specials, they were not validated to prohibit CRLF sequence...
ALPINE-CVE-2026-47241
Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a raw string argument which is only validated to prevent CRLF injection and then sent verbatim. If this string is derived from user-controlled inpu...
AZL-91284 CVE-2026-47242 affecting package ruby 3.3.5-10
Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, when Net::IMAPid is called with a hash argument, although the ID field value strings are correctly quoted escaping quoted specials, they were not validated to prohibit CRLF sequence...
AZL-91281 CVE-2026-47240 affecting package ruby 3.3.5-10
Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a "raw data" argument that is sent verbatim after validation to prevent command injection. However, if a server does not support non-synchronizing...
ALPINE-CVE-2026-47242
Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, when Net::IMAPid is called with a hash argument, although the ID field value strings are correctly quoted escaping quoted specials, they were not validated to prohibit CRLF sequence...
CVE-2026-47241
Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a raw string argument which is only validated to prevent CRLF injection and then sent verbatim. If this string is derived from user-controlled inpu...
CVE-2026-47242
Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, when Net::IMAPid is called with a hash argument, although the ID field value strings are correctly quoted escaping quoted specials, they were not validated to prohibit CRLF sequence...
CVE-2026-47240
Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a "raw data" argument that is sent verbatim after validation to prevent command injection. However, if a server does not support non-synchronizing...
CVE-2026-47240
Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a "raw data" argument that is sent verbatim after validation to prevent command injection. However, if a server does not support non-synchronizing...
UBUNTU-CVE-2026-47242
Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, when Net::IMAPid is called with a hash argument, although the ID field value strings are correctly quoted escaping quoted specials, they were not validated to prohibit CRLF sequence...
UBUNTU-CVE-2026-47241
Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a raw string argument which is only validated to prevent CRLF injection and then sent verbatim. If this string is derived from user-controlled inpu...
CVE-2026-47242
Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, when Net::IMAPid is called with a hash argument, although the ID field value strings are correctly quoted escaping quoted specials, they were not validated to prohibit CRLF sequence...