Rails Active Storage: unauth file write via ImageMagick, 9.8
Active Storage 8.1.4.1 and 8.0.5.2 fix a critical ImageMagick flaw (GHSA-f3w6-w445-fwh9) that lets an unauthenticated upload write — and sometimes read — arbitrary server files. No CVE yet.