Topic
Rails
3 stories about Rails that passed the news check, newest first.
Security · High impact ·
Active Storage: Possible arbitrary file write and read in image analysis (CVE-2026-122006)
GitHub Advisory Database published an advisory on 2026-11-13 for CVE-2026-122006 in Active Storage, Rails' file attachment library.
GitHub Advisory Database
Release ·
What's new in RubyGems and Bundler 4.1
Ruby Weekly issue #826 (November 12, 2026) features an article on RubyGems and Bundler 4.1.
Ruby Weekly
Security · High impact ·
Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads
A critical Active Storage flaw in Ruby on Rails lets an unauthenticated attacker write arbitrary files to a server via a crafted upload when the app processes uploads with ImageMagick.
The Hacker News · 4 sources