mail (RubyGems)
Advisories
5
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 2.9.1 or later clears every advisory below that has a fix.
Upgrade commands
bundler
bundle update mail # Gemfile: gem "mail", ">= 2.9.1"Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-mvxr-6m87-mv2q Mail: Email address spoofing via malformed RFC 2047 encoded-words |
Medium EPSS 0.45% |
< 2.9.1 | 2.9.1 |
| GHSA-cj92-c4fj-w9c5 Mail Gem Path Traversal vulnerability |
Medium EPSS 4.92% |
< 2.4.4 | 2.4.4 |
| GHSA-cpjc-p7fc-j9xh Mail Improper Input Validation vulnerability |
Medium EPSS 2.71% |
< 2.2.15 | 2.2.15 |
| GHSA-rp63-jfmw-532w Mail Gem Improper Input Validation vulnerability |
High EPSS 4.47% |
< 2.4.3 | 2.4.3 |
| GHSA-q86f-fmqf-qrf6 Mail Gem CRLF Injection vulnerability |
Medium EPSS 3.40% |
< 2.5.5 | 2.5.5 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor