Skip to content
OpenAdvisories

Vendor

rubyonrails

2 known vulnerabilities.

Products

Active Storage 1 Thor 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-122006 Public exploit

    Active Storage: Possible arbitrary file write and read in image analysis

    The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read and write operations (e.g., reading secret_key_base) because the ImageMagick analyzer runs when a file is attached, and there is not a…

    rubyonrails Active Storage rails rails Debian Ubuntu RubyGems