UnratedFix available
net-imap v0.6.4 security fixes
Type: patchSources: net-imap
net-imap v0.6.4 fixes vulnerabilities involving STARTTLS stripping, argument injection, and denial of service. The release also adds configurable SCRAM authentication iteration limits.
- Products
- net-imap
- Affected versions
- Not specified
- Fixed versions
- v0.6.4
- CVEs
- Not specified
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 30 Oct 2026, 06:16 UTC · Revision 1
Source evidence
net-imap v0.6.4 security fixes
github-ruby-net-imap · Original sourcePublished 24 Apr 2026, 13:15 UTC
net-imap v0.6.4 fixes vulnerabilities involving STARTTLS stripping, argument injection, and denial of service. The release also adds configurable SCRAM authentication iteration limits.
This release contains fixes for multiple vulnerabilities concerning STARTTLS stripping, argument validation, and denial of service attacks.
net-imap
Fixed versions: v0.6.4
Complete source record
{
"id": "1e8c341478901a3d0ba8ab74d0c04284bdc6421519ddc1fd703cf87c306eefe8",
"url": "https://github.com/ruby/net-imap/releases/tag/v0.6.4",
"method": "llm",
"payload": {
"kind": "patch",
"title": "net-imap v0.6.4 security fixes",
"summary": "net-imap v0.6.4 fixes vulnerabilities involving STARTTLS stripping, argument injection, and denial of service. The release also adds configurable SCRAM authentication iteration limits.",
"evidence": "This release contains fixes for multiple vulnerabilities concerning STARTTLS stripping, argument validation, and denial of service attacks.",
"products": [
{
"name": {
"value": "net-imap",
"evidence": "Release notes from net-imap"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "v0.6.4",
"evidence": "v0.6.4"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"fixed_cves": [],
"related_cves": [],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "github-ruby-net-imap",
"document_id": 22499,
"published_at": "2026-04-24T13:15:58+00:00"
}