ruby-on-rails

Rails Active Storage 9.8: Crafted ImageMagick Uploads Let Attackers Write Server Files

A 9.8 flaw in Rails Active Storage lets unauthenticated uploads drive ImageMagick to write — and read — files outside the image; fixed in 8.1.4.1 and 8.0.5.2 alongside an 8.8 sibling; default Debian/Ubuntu policies do not stop it.