{"uuid": "6676af12-2398-457c-b581-d6ce1e49ec27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66066", "type": "seen", "source": "https://bsky.app/profile/foursignalsdev.bsky.social/post/3mrvgt4jtg62x", "content": "CVE-2026-66066 in Active Storage + libvips allows arbitrary file read and RCE via crafted images. Patched in Rails 7.2.3.2, 8.0.5.1, 8.1.3.1. Upgrade and rotate all secrets now.", "creation_timestamp": "2026-07-30T22:00:12.285190Z"}