Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/mail@2.5.5
purl pkg:gem/mail@2.5.5
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-66dq-g2ab-5qbz Mail Gem CRLF Injection vulnerability The mail gem before 2.5.5 for Ruby (aka A Really Ruby Mail Library) is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF sequences immediately before and after a DATA substring. CVE-2015-9097
GHSA-q86f-fmqf-qrf6
OSV-131677

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-29T14:21:34.591273+00:00 GHSA Importer Fixing VCID-66dq-g2ab-5qbz https://github.com/advisories/GHSA-q86f-fmqf-qrf6 38.6.0
2026-05-29T08:57:19.158478+00:00 GithubOSV Importer Fixing VCID-66dq-g2ab-5qbz https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2017/10/GHSA-q86f-fmqf-qrf6/GHSA-q86f-fmqf-qrf6.json 38.6.0