Monthly
Denial of Service in Ruby's Net::IMAP gem allows attackers to cause command hanging and thread deadlocks when crafted search or fetch arguments ending in `{0}` or `{0+}` bypass validation and are sent verbatim. Affects applications that pass user-controlled input to the `criteria`, `search_keys`, or `attr` arguments of IMAP commands, especially in multi-threaded environments. No public exploit has been identified; SSVC reports no exploitation, and EPSS is moderate at 0.44%.
Denial of Service in Ruby's Net::IMAP gem allows attackers to cause command hanging and thread deadlocks when crafted search or fetch arguments ending in `{0}` or `{0+}` bypass validation and are sent verbatim. Affects applications that pass user-controlled input to the `criteria`, `search_keys`, or `attr` arguments of IMAP commands, especially in multi-threaded environments. No public exploit has been identified; SSVC reports no exploitation, and EPSS is moderate at 0.44%.