All vulnerabilities

Servers and applications

GHSA-hfr4-8rjc-97m2

Possible circumvention of file size limits in Active Storage direct uploads to Google Cloud Storage

Severity
Medium 5.3
Published
4 Nov 2026
Last changed
4 Nov 2026
Added to UpHeron
4 Nov 2026
Fixed in
8.0.5.2, 8.1.4.1
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
Ruby on RailsServers and applications · github:rails/rails
  • Every version before 8.0.5.2
  • From 8.1 before 8.1.4.1

References