{"action":"Upgrade net-imap to 0.4.24 or later.","affected":[{"fixed":"0.6.4","introduced":"0.6.0"},{"fixed":"0.5.14","introduced":"0.5.0"},{"fixed":"0.4.24","introduced":"0"}],"component":"net-imap","cve_ids":["CVE-2026-42245"],"ecosystem":"RubyGems","epss":0.0041,"exploited":false,"fixed_versions":["0.6.4","0.5.14","0.4.24"],"ghsa_id":"GHSA-q2mw-fvj9-vvcw","id":"tcs_01M5KEMRJB9FHX4FAVW25ZHCEA","modified_at":"2026-09-10T03:51:06.713077892Z","published_at":"2026-05-04T22:02:56Z","references":["https://osv.dev/vulnerability/GHSA-q2mw-fvj9-vvcw","https://github.com/ruby/net-imap/security/advisories/GHSA-q2mw-fvj9-vvcw","https://nvd.nist.gov/vuln/detail/CVE-2026-42245","https://github.com/ruby/net-imap/commit/6091f7d6b1f3514cafbfe39c76f2b5d73de3ca96","https://github.com/ruby/net-imap/commit/88d95231fc8afef11c1f074453f7d75b68c9dfda","https://github.com/ruby/net-imap/commit/de685f91a4a4cc75eb80da898c2bf8af08d34819","https://github.com/ruby/net-imap","https://github.com/ruby/net-imap/releases/tag/v0.4.24","https://github.com/ruby/net-imap/releases/tag/v0.5.14","https://github.com/ruby/net-imap/releases/tag/v0.6.4","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/net-imap/CVE-2026-42245.yml"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-q2mw-fvj9-vvcw","url":"https://osv.dev/vulnerability/GHSA-q2mw-fvj9-vvcw"}],"summary":"net-imap has quadratic complexity when reading response literals"}