Threats tagged 'ghsa-wgv4-95jc-33jm'

A critical vulnerability exists in the activestorage gem for Ruby on Rails versions before 8.1.4.1. When processing attachments using ImageMagick, the lack of an ImageMagick security policy allows the ImageMagick analyzer to perform unintended server read and write operations, potentially exposing sensitive data such as secret_key_base.