Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, Net::IMAP::ResponseReader has quadratic time complexity when reading large responses containing many string literals. A hostile server can send responses which are crafted to exhaust the client's CPU for a denial of service attack. This issue has been patched in versions 0.4.24, 0.5.14, and 0.6.4.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-05-05 | 1 | Disclosure1 |
| 2026-05-09 | 1 | Disclosure1 |
| 2026-05-10 | 1 | General1 |
CVE-2026-42245 Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, Net::IMAP::ResponseReader has … https://www.cve.org/CVERecord?id=CVE-2026-42245
Post summary
A brief notice of CVE‑2026‑42245 affecting Ruby Net::IMAP with a link to its CVE record; no details on exploitation, mitigation, or technical specifics are given.
CVE-2026-42245 Denial of Service via Quadratic Time Complexity in Net::IMAP Resp... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42245 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
The tweet announces CVE-2026-42245, a Denial‑of‑Service vulnerability caused by quadratic time complexity in Net::IMAP response handling, linking to details but offering no evidence of exploitation or remediation.
🔵 Net::IMAP (Ruby), Quadratic Complexity, #CVE-2026-42245 (Low) https://dailycve.com/netimap-ruby-quadratic-complexity-cve-2026-42245-low/
Post summary
The tweet announces the discovery of CVE-2026-42245 in Ruby's Net::IMAP module, describing it as a quadratic‑complexity vulnerability of low severity.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | ruby-lang | net\ | \ | - | - |