ruby-carrierwave vulnerabilities (Ubuntu)

3 vulnerabilities.

• ruby-carrierwave Ubuntu CarrierWave has a denylisted_content_type bypass via Unescaped Regex Metacharacters CVE-2026-44587 Fix available 4.7 MediumMay 27, 2026
• ruby-carrierwave Ubuntu CarrierWave has a content-type allowlist bypass vulnerability, possibly leading to XSS CVE-2023-49090 Fix available 6.8 MediumNovember 29, 2023
• ruby-carrierwave Ubuntu Code Injection vulnerability in CarrierWave CVE-2021-21305 Fix available EPSS 12.7% 7.4 HighFebruary 8, 2021