Security
15 min read
Rails' November 2026 Active Storage File Write and Read: GHSA-f3w6-w445-fwh9
Rails 8.1.4.1 and 8.0.5.2 fix a Critical (CVSS 9.8) Active Storage flaw: an uploaded image can make ImageMagick write, and read, files on the server.
Atlas Security
Security Advisories