Vulnerability · Published May 9, 2026 · Assigned by GitHub_M

CVE-2026-42246net-imap vulnerable to STARTTLS stripping via invalid response timing

High 7.4

In plain English

A high-severity security flaw in net-imap from ruby. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 24% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.4High

Exploit odds (30 days)0.3%top 75.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can cause Net::IMAP#starttls to return "successfully", without starting TLS. This issue has been patched in versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
AlmaLinux:10	ruby	3.3.10-13.el10_2	ALSA-2026:33565
AlmaLinux:8	ruby	3.3.10-7.module_el8.10.0+4210+b037b1ec	ALSA-2026:33515
AlmaLinux:8	ruby	2.5.9-115.module_el8.10.0+4212+150d00eb	ALSA-2026:33514
AlmaLinux:9	ruby	4.0.3-33.module_el9.8.0+273+a67497ba	ALSA-2026:33577
AlmaLinux:9	ruby	3.0.7-167.el9_8	ALSA-2026:33512
AlmaLinux:9	ruby	3.3.10-7.module_el9.8.0+272+38177c5f	ALSA-2026:33576
AlmaLinux:10	ruby-bundled-gems	3.3.10-13.el10_2	ALSA-2026:33565
AlmaLinux:8	ruby-bundled-gems	3.3.10-7.module_el8.10.0+4210+b037b1ec	ALSA-2026:33515
AlmaLinux:9	ruby-bundled-gems	4.0.3-33.module_el9.8.0+273+a67497ba	ALSA-2026:33577
AlmaLinux:9	ruby-bundled-gems	3.3.10-7.module_el9.8.0+272+38177c5f	ALSA-2026:33576
AlmaLinux:10	ruby-default-gems	3.3.10-13.el10_2	ALSA-2026:33565
AlmaLinux:8	ruby-default-gems	3.3.10-7.module_el8.10.0+4210+b037b1ec	ALSA-2026:33515
AlmaLinux:9	ruby-default-gems	3.0.7-167.el9_8	ALSA-2026:33512
AlmaLinux:9	ruby-default-gems	3.3.10-7.module_el9.8.0+272+38177c5f	ALSA-2026:33576
AlmaLinux:9	ruby-default-gems	4.0.3-33.module_el9.8.0+273+a67497ba	ALSA-2026:33577
AlmaLinux:10	ruby-devel	3.3.10-13.el10_2	ALSA-2026:33565
AlmaLinux:8	ruby-devel	3.3.10-7.module_el8.10.0+4210+b037b1ec	ALSA-2026:33515
AlmaLinux:8	ruby-devel	2.5.9-115.module_el8.10.0+4212+150d00eb	ALSA-2026:33514
AlmaLinux:9	ruby-devel	4.0.3-33.module_el9.8.0+273+a67497ba	ALSA-2026:33577
AlmaLinux:9	ruby-devel	3.0.7-167.el9_8	ALSA-2026:33512
AlmaLinux:9	ruby-devel	3.3.10-7.module_el9.8.0+272+38177c5f	ALSA-2026:33576
AlmaLinux:10	ruby-doc	3.3.10-13.el10_2	ALSA-2026:33565
AlmaLinux:8	ruby-doc	2.5.9-115.module_el8.10.0+4212+150d00eb	ALSA-2026:33514
AlmaLinux:8	ruby-doc	3.3.10-7.module_el8.10.0+4210+b037b1ec	ALSA-2026:33515
AlmaLinux:9	ruby-doc	3.0.7-167.el9_8	ALSA-2026:33512
AlmaLinux:9	ruby-doc	4.0.3-33.module_el9.8.0+273+a67497ba	ALSA-2026:33577
AlmaLinux:9	ruby-doc	3.3.10-7.module_el9.8.0+272+38177c5f	ALSA-2026:33576
AlmaLinux:8	ruby-irb	2.5.9-115.module_el8.10.0+4212+150d00eb	ALSA-2026:33514
AlmaLinux:10	ruby-libs	3.3.10-13.el10_2	ALSA-2026:33565
AlmaLinux:8	ruby-libs	2.5.9-115.module_el8.10.0+4212+150d00eb	ALSA-2026:33514
AlmaLinux:8	ruby-libs	3.3.10-7.module_el8.10.0+4210+b037b1ec	ALSA-2026:33515
AlmaLinux:9	ruby-libs	3.3.10-7.module_el9.8.0+272+38177c5f	ALSA-2026:33576
AlmaLinux:9	ruby-libs	4.0.3-33.module_el9.8.0+273+a67497ba	ALSA-2026:33577
AlmaLinux:9	ruby-libs	3.0.7-167.el9_8	ALSA-2026:33512
AlmaLinux:10	ruby4.0	4.0.3-35.el10_2	ALSA-2026:33540
AlmaLinux:10	ruby4.0-devel	4.0.3-35.el10_2	ALSA-2026:33540
AlmaLinux:10	ruby4.0-doc	4.0.3-35.el10_2	ALSA-2026:33540
AlmaLinux:10	ruby4.0-rubygem-mysql2	0.5.7-35.el10_2	ALSA-2026:33540
AlmaLinux:10	ruby4.0-rubygem-pg	1.6.3-35.el10_2	ALSA-2026:33540
AlmaLinux:8	rubygem-abrt	0.4.0-1.module_el8.10.0+3799+191214cc	ALSA-2026:33515
AlmaLinux:8	rubygem-abrt	0.3.0-4.module_el8.5.0+2625+ec418553	ALSA-2026:33514
AlmaLinux:8	rubygem-abrt-doc	0.3.0-4.module_el8.10.0+3871+342e2c2f	ALSA-2026:33514
AlmaLinux:8	rubygem-abrt-doc	0.4.0-1.module_el8.10.0+3799+191214cc	ALSA-2026:33515
AlmaLinux:10	rubygem-bigdecimal	3.1.5-13.el10_2	ALSA-2026:33565
AlmaLinux:8	rubygem-bigdecimal	1.3.4-115.module_el8.10.0+4212+150d00eb	ALSA-2026:33514
AlmaLinux:8	rubygem-bigdecimal	3.1.5-7.module_el8.10.0+4210+b037b1ec	ALSA-2026:33515
AlmaLinux:9	rubygem-bigdecimal	4.0.1-33.module_el9.8.0+273+a67497ba	ALSA-2026:33577
AlmaLinux:9	rubygem-bigdecimal	3.1.5-7.module_el9.8.0+272+38177c5f	ALSA-2026:33576
AlmaLinux:9	rubygem-bigdecimal	3.0.0-167.el9_8	ALSA-2026:33512
AlmaLinux:8	rubygem-bson	4.3.0-2.module_el8.6.0+3170+4b08f9d4	ALSA-2026:33514
AlmaLinux:8	rubygem-bson	4.3.0-2.module_el8.5.0+259+8cec6917	ALSA-2026:33514
AlmaLinux:8	rubygem-bson	4.3.0-2.module_el8.5.0+2625+ec418553	ALSA-2026:33514
AlmaLinux:8	rubygem-bson-doc	4.3.0-2.module_el8.5.0+2625+ec418553	ALSA-2026:33514
AlmaLinux:10	rubygem-bundler	2.5.22-13.el10_2	ALSA-2026:33565
AlmaLinux:8	rubygem-bundler	2.5.22-7.module_el8.10.0+4210+b037b1ec	ALSA-2026:33515
AlmaLinux:8	rubygem-bundler	1.16.1-5.module_el8.10.0+3991+5e651d4e	ALSA-2026:33514
AlmaLinux:9	rubygem-bundler	4.0.6-33.module_el9.8.0+273+a67497ba	ALSA-2026:33577
AlmaLinux:9	rubygem-bundler	2.2.33-167.el9_8	ALSA-2026:33512
AlmaLinux:9	rubygem-bundler	2.5.22-7.module_el9.8.0+272+38177c5f	ALSA-2026:33576
AlmaLinux:8	rubygem-bundler-doc	1.16.1-5.module_el8.10.0+3991+5e651d4e	ALSA-2026:33514
AlmaLinux:8	rubygem-did_you_mean	1.2.0-115.module_el8.10.0+4212+150d00eb	ALSA-2026:33514
AlmaLinux:10	rubygem-io-console	0.7.1-13.el10_2	ALSA-2026:33565
AlmaLinux:8	rubygem-io-console	0.4.6-115.module_el8.10.0+4212+150d00eb	ALSA-2026:33514
AlmaLinux:8	rubygem-io-console	0.7.1-7.module_el8.10.0+4210+b037b1ec	ALSA-2026:33515
AlmaLinux:9	rubygem-io-console	0.8.2-33.module_el9.8.0+273+a67497ba	ALSA-2026:33577
AlmaLinux:9	rubygem-io-console	0.7.1-7.module_el9.8.0+272+38177c5f	ALSA-2026:33576
AlmaLinux:9	rubygem-io-console	0.5.7-167.el9_8	ALSA-2026:33512
AlmaLinux:10	rubygem-irb	1.13.1-13.el10_2	ALSA-2026:33565
AlmaLinux:8	rubygem-irb	1.13.1-7.module_el8.10.0+4210+b037b1ec	ALSA-2026:33515
AlmaLinux:9	rubygem-irb	1.16.0-33.module_el9.8.0+273+a67497ba	ALSA-2026:33577
AlmaLinux:9	rubygem-irb	1.3.5-167.el9_8	ALSA-2026:33512
AlmaLinux:9	rubygem-irb	1.13.1-7.module_el9.8.0+272+38177c5f	ALSA-2026:33576
AlmaLinux:10	rubygem-json	2.7.2-13.el10_2	ALSA-2026:33565
AlmaLinux:8	rubygem-json	2.1.0-115.module_el8.10.0+4212+150d00eb	ALSA-2026:33514
AlmaLinux:8	rubygem-json	2.7.2-7.module_el8.10.0+4210+b037b1ec	ALSA-2026:33515
AlmaLinux:9	rubygem-json	2.7.2-7.module_el9.8.0+272+38177c5f	ALSA-2026:33576
AlmaLinux:9	rubygem-json	2.18.0-33.module_el9.8.0+273+a67497ba	ALSA-2026:33577
AlmaLinux:9	rubygem-json	2.5.1-167.el9_8	ALSA-2026:33512
AlmaLinux:10	rubygem-minitest	5.20.0-13.el10_2	ALSA-2026:33565
AlmaLinux:8	rubygem-minitest	5.10.3-115.module_el8.10.0+4212+150d00eb	ALSA-2026:33514
AlmaLinux:8	rubygem-minitest	5.20.0-7.module_el8.10.0+4210+b037b1ec	ALSA-2026:33515
AlmaLinux:9	rubygem-minitest	5.14.2-167.el9_8	ALSA-2026:33512
AlmaLinux:9	rubygem-minitest	5.20.0-7.module_el9.8.0+272+38177c5f	ALSA-2026:33576
AlmaLinux:9	rubygem-minitest	6.0.0-33.module_el9.8.0+273+a67497ba	ALSA-2026:33577
AlmaLinux:8	rubygem-mongo	2.5.1-2.module_el8.5.0+2625+ec418553	ALSA-2026:33514
AlmaLinux:8	rubygem-mongo-doc	2.5.1-2.module_el8.5.0+2625+ec418553	ALSA-2026:33514
AlmaLinux:8	rubygem-mysql2	0.4.10-4.module_el8.6.0+3170+4b08f9d4	ALSA-2026:33514
AlmaLinux:8	rubygem-mysql2	0.5.5-1.module_el8.10.0+3799+191214cc	ALSA-2026:33515
AlmaLinux:8	rubygem-mysql2	0.4.10-4.module_el8.5.0+259+8cec6917	ALSA-2026:33514
AlmaLinux:8	rubygem-mysql2	0.4.10-4.module_el8.5.0+2625+ec418553	ALSA-2026:33514
AlmaLinux:9	rubygem-mysql2	0.5.5-3.module_el9.7.0+184+e2e36072	ALSA-2026:33576
AlmaLinux:9	rubygem-mysql2	0.5.7-1.module_el9.8.0+232+50f6dd36	ALSA-2026:33577
AlmaLinux:8	rubygem-mysql2-doc	0.4.10-4.module_el8.5.0+2625+ec418553	ALSA-2026:33514
AlmaLinux:8	rubygem-mysql2-doc	0.5.5-1.module_el8.10.0+3799+191214cc	ALSA-2026:33515
AlmaLinux:9	rubygem-mysql2-doc	0.5.7-1.module_el9.8.0+232+50f6dd36	ALSA-2026:33577
AlmaLinux:9	rubygem-mysql2-doc	0.5.5-3.module_el9.7.0+184+e2e36072	ALSA-2026:33576
AlmaLinux:8	rubygem-net-telnet	0.1.1-115.module_el8.10.0+4212+150d00eb	ALSA-2026:33514
AlmaLinux:8	rubygem-openssl	2.1.2-115.module_el8.10.0+4212+150d00eb	ALSA-2026:33514
AlmaLinux:8	rubygem-pg	1.0.0-3.module_el8.9.0+3635+c6f99506	ALSA-2026:33514
AlmaLinux:8	rubygem-pg	1.5.4-1.module_el8.10.0+3799+191214cc	ALSA-2026:33515
AlmaLinux:9	rubygem-pg	1.6.3-1.module_el9.8.0+232+50f6dd36	ALSA-2026:33577
AlmaLinux:9	rubygem-pg	1.5.4-2.module_el9.7.0+245+447713a2	ALSA-2026:33576
AlmaLinux:8	rubygem-pg-doc	1.0.0-3.module_el8.9.0+3635+c6f99506	ALSA-2026:33514
AlmaLinux:8	rubygem-pg-doc	1.5.4-1.module_el8.10.0+3799+191214cc	ALSA-2026:33515
AlmaLinux:9	rubygem-pg-doc	1.5.4-2.module_el9.7.0+245+447713a2	ALSA-2026:33576
AlmaLinux:9	rubygem-pg-doc	1.6.3-1.module_el9.8.0+232+50f6dd36	ALSA-2026:33577
AlmaLinux:10	rubygem-power_assert	2.0.3-13.el10_2	ALSA-2026:33565
AlmaLinux:8	rubygem-power_assert	2.0.3-7.module_el8.10.0+4210+b037b1ec	ALSA-2026:33515
AlmaLinux:8	rubygem-power_assert	1.1.1-115.module_el8.10.0+4212+150d00eb	ALSA-2026:33514
AlmaLinux:9	rubygem-power_assert	1.2.1-167.el9_8	ALSA-2026:33512
AlmaLinux:9	rubygem-power_assert	2.0.3-7.module_el9.8.0+272+38177c5f	ALSA-2026:33576
AlmaLinux:9	rubygem-power_assert	3.0.1-33.module_el9.8.0+273+a67497ba	ALSA-2026:33577
AlmaLinux:10	rubygem-psych	5.1.2-13.el10_2	ALSA-2026:33565
AlmaLinux:8	rubygem-psych	3.0.2-115.module_el8.10.0+4212+150d00eb	ALSA-2026:33514
AlmaLinux:8	rubygem-psych	5.1.2-7.module_el8.10.0+4210+b037b1ec	ALSA-2026:33515
AlmaLinux:9	rubygem-psych	3.3.2-167.el9_8	ALSA-2026:33512
AlmaLinux:9	rubygem-psych	5.3.1-33.module_el9.8.0+273+a67497ba	ALSA-2026:33577
AlmaLinux:9	rubygem-psych	5.1.2-7.module_el9.8.0+272+38177c5f	ALSA-2026:33576
AlmaLinux:10	rubygem-racc	1.7.3-13.el10_2	ALSA-2026:33565
AlmaLinux:8	rubygem-racc	1.7.3-7.module_el8.10.0+4210+b037b1ec	ALSA-2026:33515
AlmaLinux:9	rubygem-racc	1.8.1-33.module_el9.8.0+273+a67497ba	ALSA-2026:33577
AlmaLinux:9	rubygem-racc	1.7.3-7.module_el9.8.0+272+38177c5f	ALSA-2026:33576
AlmaLinux:10	rubygem-rake	13.1.0-13.el10_2	ALSA-2026:33565
AlmaLinux:8	rubygem-rake	12.3.3-115.module_el8.10.0+4212+150d00eb	ALSA-2026:33514
AlmaLinux:8	rubygem-rake	13.1.0-7.module_el8.10.0+4210+b037b1ec	ALSA-2026:33515
AlmaLinux:9	rubygem-rake	13.1.0-7.module_el9.8.0+272+38177c5f	ALSA-2026:33576
AlmaLinux:9	rubygem-rake	13.3.1-33.module_el9.8.0+273+a67497ba	ALSA-2026:33577
AlmaLinux:9	rubygem-rake	13.0.3-167.el9_8	ALSA-2026:33512
AlmaLinux:10	rubygem-rbs	3.4.0-13.el10_2	ALSA-2026:33565
AlmaLinux:8	rubygem-rbs	3.4.0-7.module_el8.10.0+4210+b037b1ec	ALSA-2026:33515
AlmaLinux:9	rubygem-rbs	3.10.0-33.module_el9.8.0+273+a67497ba	ALSA-2026:33577
AlmaLinux:9	rubygem-rbs	1.4.0-167.el9_8	ALSA-2026:33512
AlmaLinux:9	rubygem-rbs	3.4.0-7.module_el9.8.0+272+38177c5f	ALSA-2026:33576
AlmaLinux:10	rubygem-rdoc	6.6.3.1-13.el10_2	ALSA-2026:33565
AlmaLinux:8	rubygem-rdoc	6.6.3.1-7.module_el8.10.0+4210+b037b1ec	ALSA-2026:33515
AlmaLinux:8	rubygem-rdoc	6.0.1.1-115.module_el8.10.0+4212+150d00eb	ALSA-2026:33514
AlmaLinux:9	rubygem-rdoc	6.3.4.1-167.el9_8	ALSA-2026:33512
AlmaLinux:9	rubygem-rdoc	6.6.3.1-7.module_el9.8.0+272+38177c5f	ALSA-2026:33576
AlmaLinux:9	rubygem-rdoc	7.0.3-33.module_el9.8.0+273+a67497ba	ALSA-2026:33577
AlmaLinux:10	rubygem-rexml	3.4.4-13.el10_2	ALSA-2026:33565
AlmaLinux:8	rubygem-rexml	3.4.4-7.module_el8.10.0+4210+b037b1ec	ALSA-2026:33515
AlmaLinux:9	rubygem-rexml	3.4.4-7.module_el9.8.0+272+38177c5f	ALSA-2026:33576
AlmaLinux:9	rubygem-rexml	3.2.5-167.el9_8	ALSA-2026:33512
AlmaLinux:9	rubygem-rexml	3.4.4-33.module_el9.8.0+273+a67497ba	ALSA-2026:33577
AlmaLinux:10	rubygem-rss	0.3.1-13.el10_2	ALSA-2026:33565
AlmaLinux:8	rubygem-rss	0.3.1-7.module_el8.10.0+4210+b037b1ec	ALSA-2026:33515
AlmaLinux:9	rubygem-rss	0.2.9-167.el9_8	ALSA-2026:33512
AlmaLinux:9	rubygem-rss	0.3.1-7.module_el9.8.0+272+38177c5f	ALSA-2026:33576
AlmaLinux:9	rubygem-rss	0.3.2-33.module_el9.8.0+273+a67497ba	ALSA-2026:33577
AlmaLinux:10	rubygem-test-unit	3.6.1-13.el10_2	ALSA-2026:33565
AlmaLinux:8	rubygem-test-unit	3.2.7-115.module_el8.10.0+4212+150d00eb	ALSA-2026:33514
AlmaLinux:8	rubygem-test-unit	3.6.1-7.module_el8.10.0+4210+b037b1ec	ALSA-2026:33515
AlmaLinux:9	rubygem-test-unit	3.3.7-167.el9_8	ALSA-2026:33512
AlmaLinux:9	rubygem-test-unit	3.7.5-33.module_el9.8.0+273+a67497ba	ALSA-2026:33577
AlmaLinux:9	rubygem-test-unit	3.6.1-7.module_el9.8.0+272+38177c5f	ALSA-2026:33576
AlmaLinux:10	rubygem-typeprof	0.21.9-13.el10_2	ALSA-2026:33565
AlmaLinux:8	rubygem-typeprof	0.21.9-7.module_el8.10.0+4210+b037b1ec	ALSA-2026:33515
AlmaLinux:9	rubygem-typeprof	0.21.9-7.module_el9.8.0+272+38177c5f	ALSA-2026:33576
AlmaLinux:9	rubygem-typeprof	0.31.1-33.module_el9.8.0+273+a67497ba	ALSA-2026:33577
AlmaLinux:9	rubygem-typeprof	0.15.2-167.el9_8	ALSA-2026:33512
AlmaLinux:8	rubygem-xmlrpc	0.3.0-115.module_el8.10.0+4212+150d00eb	ALSA-2026:33514
AlmaLinux:10	rubygems	3.5.22-13.el10_2	ALSA-2026:33565
AlmaLinux:8	rubygems	2.7.6.3-115.module_el8.10.0+4212+150d00eb	ALSA-2026:33514
AlmaLinux:8	rubygems	3.5.22-7.module_el8.10.0+4210+b037b1ec	ALSA-2026:33515
AlmaLinux:9	rubygems	3.2.33-167.el9_8	ALSA-2026:33512
AlmaLinux:9	rubygems	3.5.22-7.module_el9.8.0+272+38177c5f	ALSA-2026:33576
AlmaLinux:9	rubygems	4.0.6-33.module_el9.8.0+273+a67497ba	ALSA-2026:33577
AlmaLinux:10	rubygems-devel	3.5.22-13.el10_2	ALSA-2026:33565
AlmaLinux:8	rubygems-devel	2.7.6.3-115.module_el8.10.0+4212+150d00eb	ALSA-2026:33514
AlmaLinux:8	rubygems-devel	3.5.22-7.module_el8.10.0+4210+b037b1ec	ALSA-2026:33515
AlmaLinux:9	rubygems-devel	3.5.22-7.module_el9.8.0+272+38177c5f	ALSA-2026:33576
AlmaLinux:9	rubygems-devel	4.0.6-33.module_el9.8.0+273+a67497ba	ALSA-2026:33577
AlmaLinux:9	rubygems-devel	3.2.33-167.el9_8	ALSA-2026:33512
Alpine:v3.21	ruby-net-imap	0.4.25-r0	ALPINE-CVE-2026-42246
Debian:12	ruby3.1	no fix listed	DEBIAN-CVE-2026-42246
Debian:13	ruby3.3	no fix listed	DEBIAN-CVE-2026-42246
Debian:14	ruby3.3	no fix listed	DEBIAN-CVE-2026-42246
Rocky Linux:10	ruby	0:3.3.10-13.el10_2	RLSA-2026:33565
Rocky Linux:9	ruby	0:3.0.7-167.el9_8	RLSA-2026:33512
Rocky Linux:10	ruby4.0	0:4.0.3-35.el10_2	RLSA-2026:33540
Rocky Linux:8	rubygem-abrt	0:0.4.0-1.module+el8.5.0+668+665814fa	RLSA-2026:33515
Rocky Linux:8	rubygem-abrt	0:0.4.0-1.module+el8.10.0+1820+f3fffb92	RLSA-2026:33515
Rocky Linux:8	rubygem-abrt	0:0.4.0-1.module+el8.10.0+1826+b62220b4	RLSA-2026:33515
Rocky Linux:8	rubygem-abrt	0:0.3.0-4.module+el8.9.0+1536+5f79634e	RLSA-2026:33514
Rocky Linux:8	rubygem-abrt	0:0.4.0-1.module+el8.9.0+1537+0b2034bd	RLSA-2026:33515
Rocky Linux:8	rubygem-abrt	0:0.4.0-1.module+el8.10.0+1679+61871737	RLSA-2026:33515
Rocky Linux:8	rubygem-abrt	0:0.4.0-1.module+el8.10.0+1741+bdb5b6ca	RLSA-2026:33515
Rocky Linux:8	rubygem-abrt	0:0.4.0-1.module+el8.10.0+1827+16ecb9d2	RLSA-2026:33515
Rocky Linux:8	rubygem-abrt	0:0.3.0-4.module+el8.5.0+738+032c9c02	RLSA-2026:33514
Rocky Linux:8	rubygem-bson	0:4.3.0-2.module+el8.9.0+1536+5f79634e	RLSA-2026:33514
Rocky Linux:8	rubygem-bundler	0:1.16.1-5.module+el8.10.0+1979+815637df	RLSA-2026:33514
Rocky Linux:8	rubygem-mongo	0:2.5.1-2.module+el8.9.0+1536+5f79634e	RLSA-2026:33514
Rocky Linux:8	rubygem-mysql2	0:0.5.5-1.module+el8.10.0+1827+16ecb9d2	RLSA-2026:33515
Rocky Linux:8	rubygem-mysql2	0:0.4.10-4.module+el8.9.0+1536+5f79634e	RLSA-2026:33514
Rocky Linux:8	rubygem-mysql2	0:0.5.5-1.module+el8.10.0+1679+61871737	RLSA-2026:33515
Rocky Linux:9	rubygem-mysql2	0:0.5.5-3.module+el9.7.0+40032+36e56d0d	RLSA-2026:33576
Rocky Linux:9	rubygem-mysql2	0:0.5.7-1.module+el9.8.0+40094+ce01217c	RLSA-2026:33577
Rocky Linux:8	rubygem-pg	0:1.5.4-1.module+el8.10.0+1679+61871737	RLSA-2026:33515
Rocky Linux:8	rubygem-pg	0:1.5.4-1.module+el8.10.0+1827+16ecb9d2	RLSA-2026:33515
Rocky Linux:8	rubygem-pg	0:1.0.0-3.module+el8.9.0+1536+5f79634e	RLSA-2026:33514

Affected products (as reported)

Vendor	Product	Versions
ruby	net-imap	< 0.3.10>= 0.4.0, < 0.4.24>= 0.5.0, < 0.5.14>= 0.6.0, < 0.6.4

Weakness: CWE-392, CWE-393, CWE-754, CWE-636, CWE-841, CWE-325 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

References

https://github.com/ruby/net-imap/security/advisories/GHSA-vcgp-9326-pqcp x_refsource_CONFIRM
https://github.com/ruby/net-imap/commit/0ede4c40b1523dfeaf95777b2678e54cc0fd9618 x_refsource_MISC
https://github.com/ruby/net-imap/commit/24a4e770b43230286a05aa2a9746cdbb3eb8485e x_refsource_MISC
https://github.com/ruby/net-imap/commit/97e2488fb5401a1783bddd959dde007d9fbce42c x_refsource_MISC
https://github.com/ruby/net-imap/commit/f79d35bf5833f186e81044c57c843eda30c873da x_refsource_MISC
https://github.com/ruby/net-imap/releases/tag/v0.3.10 x_refsource_MISC
https://github.com/ruby/net-imap/releases/tag/v0.4.24 x_refsource_MISC
https://github.com/ruby/net-imap/releases/tag/v0.5.14 x_refsource_MISC
https://access.redhat.com/security/cve/CVE-2026-42246 vdb-entry, x_refsource_REDHAT
RHBZ#2468499 issue-tracking, x_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42246.json x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:37397 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35895 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33565 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33540 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33514 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33515 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35866 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35867 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34076 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35834 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33630 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36099 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33462 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37238 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33512 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33576 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33577 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33721 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33552 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33551 vendor-advisory, x_refsource_REDHAT