Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. From versions 0.4.0 to before 0.4.24, 0.5.0 to before 0.5.14, and 0.6.0 to before 0.6.4, when authenticating a connection with SCRAM-SHA1 or SCRAM-SHA256, a hostile server can perform a computational denial-of-service attack on the client process by sending a big iteration count value. This issue has been patched in versions 0.4.24, 0.5.14, and 0.6.4.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-42256 Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. From versions 0.4.0 to before 0.4.24, 0.5.0 to before 0.5.14, and 0.6.0 to … https://www.cve.org/CVERecord?id=CVE-2026-42256
Post summary
The text merely cites a CVE identifier and affected Ruby Net::IMAP version ranges, providing no further detail on exploitation, patches, or technical content.
CVE-2026-42256 Denial of Service in Net::IMAP SCRAM Authentication via Iteration Count https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42256
Post summary
The text provides a technical description of CVE-2026-42256 as a Denial of Service flaw in Net::IMAP SCRAM authentication tied to iteration count handling, but it lacks any PoC, exploit code, active exploitation, patch, or false‑positive discussion.
🟠 Ruby net-imap, Denial of Service, #CVE-2026-42256 (Moderate) https://dailycve.com/ruby-net-imap-denial-of-service-cve-2026-42256-moderate/
Post summary
The text references a Ruby net-imap denial of service CVE (2026-42256) with minimal detail, providing only its identifier and the vulnerability type.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | ruby-lang | net\ | \ | - | - |