Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Net::IMAP can hang email connections with crafted input
published 4 months ago
Summary
Ruby applications that use the Net::IMAP library to talk to email servers may stop responding if they pass specially crafted search or fetch strings that come from outside sources. The malformed text makes the server treat the next command as part of the previous one, causing the client to wait forever. Update Net::IMAP to the latest version or ensure such strings are never built from user input.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Echo | echo | ruby3.3 | All versions |
Original advisory text
ECHO-bf99-96ee-af6b
References
Timeline
Published6 Jul 2026
Updated6 Jul 2026
First seen6 Jul 2026
Sources
ECHO-bf99-96ee-af6b · OSV
Track software like this
Free during beta