Skip to content
Rails Activestorage vulnerabilities
-
rubyonrails rails, rails activestorage +1 more
Rails Active Storage has a possible DoS vulnerability in proxy mode via multi-range requests
CVE-2026-33658
Fix available
2.3 Low
-
rubyonrails rails, rails activestorage +1 more
Rails Active Storage has possible glob injection in its DiskService
CVE-2026-33202
Fix available
6.6 Medium
-
rubyonrails rails, rails activestorage, red hat 3scale api management platform 2 +2 more
Rails Active Storage has possible Path Traversal in DiskService
CVE-2026-33195
Fix available
8.0 High
-
rubyonrails rails, rails activestorage +1 more
Rails Active Storage has a possible DoS vulnerability when in proxy mode via Range requests
CVE-2026-33174
Fix available
6.6 Medium
-
rubyonrails rails, rails activestorage +1 more
Rails Active Storage has possible content type bypass via metadata in direct uploads
CVE-2026-33173
Fix available
5.3 Medium
-
rails activestorage, red hat 3scale api management platform 2, satellite 6 +2 more
Active Storage allowed transformation methods that were potentially unsafe
CVE-2025-24293
Public exploitFix available
9.2 Critical