Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, several Net::IMAP commands accept a raw string argument that is sent to the server without validation or escaping. If this string is derived from user-controlled input, it may contain contain CRLF sequences, which an attacker can use to inject arbitrary IMAP commands. This issue has been patched in versions 0.4.24, 0.5.14, and 0.6.4.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-05-09 | 1 | Disclosure1 |
| 2026-05-10 | 1 | General1 |
CVE-2026-42257 Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, several Net::IMAP commands acc… https://www.cve.org/CVERecord?id=CVE-2026-42257
Post summary
A brief mention of the CVE record and affected versions but no additional exploitation, mitigation, or technical detail is provided.
CVE-2026-42257 Command Injection in Net::IMAP via CRLF Sequences in Ruby https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42257
Post summary
The text announces a new command injection vulnerability (CVE-2026-42257) in Net::IMAP caused by CRLF sequences in Ruby, without any mention of exploits, patches, or active use.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | ruby-lang | net\ | \ | - | - |