Tag: ruby-vips

Critical CVEs

Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads

Ruby on Rails has released fixes for a critical Active Storage vulnerability, CVE-2026-66066 (CVSS 9.5), that could allow unauthenticated attackers to read…

Active Storage credential theft CVE-2026-50522 CVE-2026-66066

July 29, 2026

Cyber Products

ruby-vips: Ruby Binding for libvips

ruby-vips is the Ruby binding for the libvips image processing library. Version 2.2.1 or later is required to mitigate CVE-2026-66066 by calling…

CVE-2026-66066 libvips Ruby ruby-vips

July 29, 2026