Search for packages
| purl | pkg:gem/mail@2.2.15 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-66dq-g2ab-5qbz
Aliases: CVE-2015-9097 GHSA-q86f-fmqf-qrf6 OSV-131677 |
Mail Gem CRLF Injection vulnerability The mail gem before 2.5.5 for Ruby (aka A Really Ruby Mail Library) is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF sequences immediately before and after a DATA substring. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-8axt-ka9d-y3d2
Aliases: CVE-2012-2140 GHSA-rp63-jfmw-532w OSV-81632 |
Mail Gem Improper Input Validation vulnerability The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) sendmail or (2) exim delivery. |
Affected by 3 other vulnerabilities. |
|
VCID-rfun-f86c-ayfd
Aliases: CVE-2012-2139 GHSA-cj92-c4fj-w9c5 OSV-81631 |
Mail Gem Path Traversal vulnerability Directory traversal vulnerability in `lib/mail/network/delivery_methods/file_delivery.rb` in the Mail gem before 2.4.4 for Ruby allows remote attackers to read arbitrary files via a `..` (dot dot) in the to parameter. |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-64ws-nakp-3fhz | Mail Improper Input Validation vulnerability The deliver function in the sendmail delivery agent (`lib/mail/network/delivery_methods/sendmail.rb`) in Ruby Mail gem 2.2.14 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail address. |
CVE-2011-0739
GHSA-cpjc-p7fc-j9xh OSV-70667 |