{"action":"Upgrade net-imap to 0.3.8 or later.","affected":[{"fixed":"0.3.8","introduced":"0.3.2"},{"fixed":"0.4.19","introduced":"0.4.0"},{"fixed":"0.5.6","introduced":"0.5.0"}],"component":"net-imap","cve_ids":["CVE-2025-25186"],"ecosystem":"RubyGems","epss":0.00626,"exploited":false,"fixed_versions":["0.3.8","0.4.19","0.5.6"],"ghsa_id":"GHSA-7fc5-f82f-cx69","id":"tcs_01M5KEHPVQ70SR5PFFH0YAH76X","modified_at":"2026-09-10T03:50:22.610809141Z","published_at":"2025-02-10T17:42:43Z","references":["https://osv.dev/vulnerability/GHSA-7fc5-f82f-cx69","https://github.com/ruby/net-imap/security/advisories/GHSA-7fc5-f82f-cx69","https://nvd.nist.gov/vuln/detail/CVE-2025-25186","https://github.com/ruby/net-imap/commit/70e3ddd071a94e450b3238570af482c296380b35","https://github.com/ruby/net-imap/commit/c8c5a643739d2669f0c9a6bb9770d0c045fd74a3","https://github.com/ruby/net-imap/commit/cb92191b1ddce2d978d01b56a0883b6ecf0b1022","https://github.com/ruby/net-imap","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/net-imap/CVE-2025-25186.yml","https://ruby.github.io/net-imap/Net/IMAP/AppendUIDData.html","https://ruby.github.io/net-imap/Net/IMAP/CopyUIDData.html","https://ruby.github.io/net-imap/Net/IMAP/UIDPlusData.html"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-7fc5-f82f-cx69","url":"https://osv.dev/vulnerability/GHSA-7fc5-f82f-cx69"}],"summary":"Possible DoS by memory exhaustion in net-imap"}