UnratedFix available
net-imap v0.5.14
Type: patchSources: net-imap
This release fixes vulnerabilities involving STARTTLS stripping and command injection, and addresses denial-of-service issues affecting response parsing and SCRAM-* authentication.
- Products
- net-imap
- Affected versions
- Not specified
- Fixed versions
- v0.5.14
- CVEs
- Not specified
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 30 Oct 2026, 05:51 UTC · Revision 1
Source evidence
This release fixes vulnerabilities involving STARTTLS stripping and command injection, and addresses denial-of-service issues affecting response parsing and SCRAM-* authentication.
v0.5.14 What's Changed 🔒 Security This release contains fixes for multiple vulnerabilities concerning STARTTLS stripping, argument validation, and denial of service attacks.
net-imap
Fixed versions: v0.5.14
Complete source record
{
"id": "3c0684fa5cd0292eb1a72606877e053bb2a7f071f9a9f3764db9688be770b8c9",
"url": "https://github.com/ruby/net-imap/releases/tag/v0.5.14",
"method": "llm",
"payload": {
"kind": "patch",
"title": "net-imap v0.5.14",
"summary": "This release fixes vulnerabilities involving STARTTLS stripping and command injection, and addresses denial-of-service issues affecting response parsing and SCRAM-* authentication.",
"evidence": "v0.5.14\n\nWhat's Changed 🔒 Security This release contains fixes for multiple vulnerabilities concerning STARTTLS stripping, argument validation, and denial of service attacks.",
"products": [
{
"name": {
"value": "net-imap",
"evidence": "Release notes from net-imap"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "v0.5.14",
"evidence": "v0.5.14"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"fixed_cves": [],
"related_cves": [],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "github-ruby-net-imap",
"document_id": 22502,
"published_at": "2026-04-24T13:19:05+00:00"
}