CVE-2026-42258: net-imap vulnerable to command Injection via unvalidated Symbol inputs

(updated )

Symbol arguments to commands are vulnerable to a CRLF Injection / IMAP Command injection via Symbol arguments passed to IMAP commands.

References

Code Behaviors & Features

Detect and mitigate CVE-2026-42258 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →