Search for packages
| purl | pkg:deb/debian/ruby-mail@2.7.1%2Bdfsg1-1.1?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-1svp-fwt6-pbey | SMTP Injection via to/from addresses The mail package does not disallow CRLF in email addresses; an attacker can inject SMTP commands in specially crafted email addresses passed to `RCPT TO` and `MAIL FROM`. |
CVE-2015-9097
GHSA-q86f-fmqf-qrf6 OSV-131677 |
| VCID-3xkv-ckqz-r3dx | Improper Input Validation The Mail gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) sendmail or (2) exim delivery. |
CVE-2012-2140
GHSA-rp63-jfmw-532w OSV-81632 |
| VCID-z8cv-3uer-pqbm | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail gem for Ruby allows remote attackers to read arbitrary files via a .. (dot dot) in the to parameter. |
CVE-2012-2139
GHSA-cj92-c4fj-w9c5 OSV-81631 |