{"uuid": "4e78ec61-585e-4754-bc90-856232acad72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66066", "type": "seen", "source": "https://bsky.app/profile/fastruby.io/post/3mrupi4wkkq27", "content": "Critical Rails CVE-2026-66066: file read + RCE in Active Storage vips image processing (default since Rails 7.0).\n\nPatch today: 7.2.3.2 / 8.0.5.1 / 8.1.3.1.\n\nOn 7.1 or older? No patch. Set VIPS_BLOCK_UNTRUSTED (libvips 8.13+) and plan your upgrade.\n\nNeed a hand? fastruby.io/#contactus", "creation_timestamp": "2026-07-30T15:02:27.321169Z"}