Skip to content

CVE record · 1 source

CVE-2026-126074

CVSS 4.3

Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record objects.

Vendor: Ruby on Rails
Product: rails
CVSS v3.1: 4.3 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Weakness: CWE-248
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

28

CVE NVD 6h ago

Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record objects.

Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record objects. Prior to 8.1.4.1 and 8.0.5.2, ActiveStorage::Filename#base and #extension_with_delimiter, and…

CVSS 4.3 Fix available CVE-2026-126074 Ruby on Rails