Threats tagged 'ghsa-hfr4-8rjc-97m2'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-126085activestorage · Active Storage: Possible circumvention of file size limits in Active Storage direct uploads to Google Cloud Storage Medium5.32026-11-10GCVE DatabaseCVE-2026-126085 Active Storage's Google Cloud Storage direct upload feature did not enforce file size limits properly, allowing clients to upload files larger than the declared size. This could bypass application-level file size validations and quotas. The issue was fixed by signing an 'x-goog-content-length-range' header that enforces the declared size, with fixed versions released. Report on CVE-2026-126085 Vulnerability CWE-602 #ghsa-hfr4-8rjc-97m2 #rubygems	GCVE Database	2026-11-10

Page 1 of 1