From Dev.to
Rails' 9.8 Upload Bug Is Really an ImageMagick Bug. Check Your Django App
On November 4, the Rails team disclosed a critical flaw in Active Storage (GHSA-f3w6-w445-fwh9, CVSS 9.8, no CVE yet at the time of writing). An unauthenticated attacker who can upload a file may be a...