Report: CVE-2026-42245 - net-imap: Quadratic complexity when reading response literals
CVE ID :CVE-2026-42245 Published : May 9, 2026, 8:16 p.m. | 1 hour, 39 minutes ago Description :Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, Net::IMAP::ResponseReader has quadratic time complexity when reading large responses containing many string literals. A hostile server can send responses which are crafted to exhaust the client's CPU for a denial of service attack. This issue has been patched in versions 0.4.24, 0.5.14, and 0.6.4. Severity: 2.3 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...