Skip to content
OpenAdvisories

Package · Debian

ruby-mail

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-63435

    Mail: Email address spoofing via malformed RFC 2047 encoded-words

    Mail is an internet library for Ruby designed to handle email generation, parsing, and sending. Prior to 2.9.1, Mail::Utilities.q_value_decode and Mail::Utilities.b_value_decode used a single String#match and an overly greedy charset capture to decode only th…

    mikel mail ruby2.3 ruby2.5 Debian Ubuntu RubyGems
  • Medium 6.1
    CVE-2015-9097

    Mail Gem CRLF Injection vulnerability

    The mail gem before 2.5.5 for Ruby (aka A Really Ruby Mail Library) is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF sequences immediately before and after a DATA substring.

    mail ruby-mail Debian RubyGems
  • Medium —
    CVE-2012-2139

    Mail Gem Path Traversal vulnerability

    Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail gem before 2.4.4 for Ruby allows remote attackers to read arbitrary files via a .. (dot dot) in the to parameter.

    mail ruby-mail Debian RubyGems