Ruby Central on Mythryl: “PSA: Critical Rails security release

PSA: Critical Rails security release - a bug in Active Storage variant processing can allow unauthenticated users to read arbitrary files, including app secrets. Upgrade now. github.com/rails/rails/...

github.comPossible arbitrary file read and remote code execution in Active Storage variant processing### Impact In its default configuration, a Rails application that displays image variants may allow an unauthenticated attacker to read arbitrary files from the server, including the process envi...

29/7/26, 9:33 pm1 repost0 likes

Post