CVE-2025-43857: Ruby Net Imap Hardcoded Limit

The IMAP client enforces a hardcoded response size limit of 512 MiB, which is excessively high and permits memory exhaustion denial-of-service from maliciously sized server payloads.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Rubyβ
greprules fetch cve-2025-43857-ruby-net-imap-hardcoded-limit --engine opengrep

Description

The IMAP client enforces a hardcoded response size limit of 512 MiB, which is excessively high and permits memory exhaustion denial-of-service from maliciously sized server payloads.