All vulnerabilities

Servers and applications

GHSA-x6mj-8jx9-qhqv

Possible sensitive session information leak in Active Storage proxy mode

Severity
Medium 6.8
Published
4 Nov 2026
Last changed
4 Nov 2026
Added to UpHeron
4 Nov 2026
Fixed in
8.0.5.2, 8.1.4.1
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
Ruby on RailsServers and applications · github:rails/rails
  • Every version before 8.0.5.2
  • From 8.1 before 8.1.4.1

References