Threats affecting pkg:gem/Active Storage

CVE-2026-122006 is a critical vulnerability in the Ruby on Rails activestorage gem before versions 8.0.5.2 and 8.1.4.1. It arises when ImageMagick is used for attachment processing without a proper security policy, allowing the ImageMagick analyzer to execute unintended operations. This can lead to unauthorized server read and write access, including exposure of sensitive data such as secret_key_base.