imagemagick
1 live · 1 on record · last incident 10 days ago
Live1
- liveRuby on Rails Ruby on Rails Active Storage Flaw Allows Arbitrary File Writes
Patch now · Disclosed · Patched · since 4 Nov 2026
A critical vulnerability in Ruby on Rails Active Storage lets unauthenticated attackers write files to the server using crafted ImageMagick uploads. The project released versions 8.1.4.1 and 8.0.5.2 to address the issue.
Do:Update to Ruby on Rails 8.1.4.1 or 8.0.5.2.
Earlier0
Nothing closed yet.