activestorage vulnerabilities

CVEs whose affected-version data names the activestorage package (rubygems). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-66066CriticalPoC

1mo ago

Action Pack is a framework for handling and responding to web requests

Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked unsafe for untrusted content, allowing a crafted upload …

▾ Abyssalactivestorage · activestorageEPSS 28%via NVD