Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads
Ruby on Rails has released fixes for a critical Active Storage vulnerability, CVE-2026-66066 (CVSS 9.5), that could allow unauthenticated attackers to read…
Tag: libvips
CVE-2026-66066: Critical Active Storage Vulnerability in Ruby on Rails
CVE-2026-66066 is a critical vulnerability in Ruby on Rails Active Storage with a CVSS score of 9.5. It allows unauthenticated attackers to…
libvips: Image Processing Library
libvips is an image processing library used by Active Storage. Versions prior to 8.13 are vulnerable to CVE-2026-66066, which allows unsafe operations…
ruby-vips: Ruby Binding for libvips
ruby-vips is the Ruby binding for the libvips image processing library. Version 2.2.1 or later is required to mitigate CVE-2026-66066 by calling…