Net::IMAP: Denial of Service via incomplete raw argument validation

CVE-2026-47241

### Summary Several Net::IMAP commands accept a raw string argument which is only validated to prevent CRLF injection a

历史摘要 · 未重新核验 · GitHub Advisory

Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument

CVE-2026-47240

Several Net::IMAP commands accept a "raw data" argument that is sent verbatim after validation to prevent command inject

历史摘要 · 未重新核验 · GitHub Advisory

Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent Connections

CVE-2026-47737

### Impact Puma is vulnerable to source IP spoofing when `set_remote_address proxy_protocol: :v1` is enabled and persis

历史摘要 · 未重新核验 · GitHub Advisory

Puma PROXY Protocol v1 Parser Allows Remote Memory Exhaustion

CVE-2026-47736

### Impact [PROXY protocol support for Puma](https://github.com/puma/puma/issues/2651) was added in version 5.5.0. Whe

历史摘要 · 未重新核验 · GitHub Advisory

CarrierWave has a denylisted_content_type bypass via Unescaped Regex Metacharacters

CVE-2026-44587

### Summary CarrierWave's content_type_denylist check fails to escape regex metacharacters in string entries, causing th

历史摘要 · 未重新核验 · GitHub Advisory

ruby-jwt: Empty-key HMAC bypass; cross-language sibling of CVE-2026-44351

CVE-2026-45363

`JWT.decode(token, '', true, algorithm: 'HS256')` accepts an attacker-forged token. `OpenSSL::HMAC.digest('SHA256', '',

历史摘要 · 未重新核验 · GitHub Advisory

view_component: System Test Entry Point Path Check Allows Sibling Directory Escape

CVE-2026-44837

### Summary The system test entrypoint canonicalizes a user-controlled file path with `File.realpath`, then checks whet

历史摘要 · 未重新核验 · GitHub Advisory

view_component: Preview Route Can Dispatch Inherited Helper Methods

CVE-2026-44836

### Summary The preview route derives an example name from the URL and calls it with `public_send`. The code does not v

历史摘要 · 未重新核验 · GitHub Advisory

katalyst-koi: Session cookies can be replayed after user logout

CVE-2026-44511

### Impact Admin session cookies were not invalidated when an admin user logged out. An attacker with access to a valid

历史摘要 · 未重新核验 · GitHub Advisory

CSS Parser: Improper Certificate Validation allows MITM injection of remote CSS content

CVE-2026-44312

### Summary The CSS Parser gem does not validate HTTPS connections, allowing a Man-in-the-Middle (MITM) attacker to inj

历史摘要 · 未重新核验 · GitHub Advisory

GraphQL-Ruby's Ruby lexer does not count comment tokens for the purposes of max_query_string_tokens

GraphQL-Ruby's `max_query_string_tokens` configuration didn't count comment tokens against the limit, allowing strings t

历史摘要 · 未重新核验 · GitHub Advisory

net-imap vulnerable to command Injection via "raw" arguments to multiple commands

CVE-2026-42257

### Summary Several `Net::IMAP` commands accept a raw string argument that is sent to the server without validation or e

历史摘要 · 未重新核验 · GitHub Advisory

net-imap vulnerable to command Injection via unvalidated Symbol inputs

CVE-2026-42258

### Summary Symbol arguments to commands are vulnerable to a CRLF Injection / IMAP Command injection via Symbol argumen

历史摘要 · 未重新核验 · GitHub Advisory

net-imap vulnerable to denial of service via high iteration count for `SCRAM-*` authentication

CVE-2026-42256

### Summary When authenticating a connection with `SCRAM-SHA1` or `SCRAM-SHA256`, a hostile server can perform a comput

历史摘要 · 未重新核验 · GitHub Advisory

net-imap has quadratic complexity when reading response literals

CVE-2026-42245

### Summary `Net::IMAP::ResponseReader` has quadratic time complexity when reading large responses containing many stri

历史摘要 · 未重新核验 · GitHub Advisory

net-imap vulnerable to STARTTLS stripping via invalid response timing

CVE-2026-42246

### Summary A man-in-the-middle attacker can cause `Net::IMAP#starttls` to return "successfully", without starting TLS.

历史摘要 · 未重新核验 · GitHub Advisory