Rails Versions 8.0.5.2 and 8.1.4.1 have been released!
The Ruby on Rails team has released versions 8.0.5.2 and 8.1.4.1 as security updates addressing 21 issues, including vulnerabilities related to arbitrary file reads and writes, remote code execution, XSS, and denial of service. The project strongly recommends that users upgrade as soon as possible, noting that security support for the 8.0 series ends on November 7, 2026. The advisory also provides detailed SHA-256 hashes and GHSA references for verification and patching. Open article →
- Rails' November 2026 Active Storage File Write and Read: GHSA-f3w6-w445-fwh9
- Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads
- Rails security releases: 8.0.5.2 and 8.1.4.1
- A Critical Rails Bug Lets an Unauthenticated Upload Write Files on Your Server, and Debian and Ubuntu's Default ImageMagick Policy Does Not Stop It. No CVE, CVSS 9.8.
- Rails 8.0.5.2 and 8.1.4.1 released addressing 21 security issues
- Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads https://t.c...