Product by Rails
Activestorage
7 known vulnerabilities in Activestorage (Rails), 0 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-24293 | Rails Activestorage: Command Injection | 8.1 | |
| Critical | CVE-2026-33202 | Rails Active Storage has possible glob injection in its DiskService | 9.1 | |
| Critical | CVE-2026-33195 | Rails Active Storage has possible Path Traversal in DiskService | 9.8 | |
| High | CVE-2026-33174 | Rails Active Storage has a possible DoS vulnerability when in proxy mode via Range requests | 7.5 | |
| Medium | CVE-2024-26144 | Possible Sensitive Session Information Leak in Active Storage | 5.3 | |
| Medium | CVE-2026-33658 | Rails Active Storage has a possible DoS vulnerability in proxy mode via multi-range requests | 6.5 | |
| Medium | CVE-2026-33173 | Rails Active Storage has possible content type bypass via metadata in direct uploads | 5.3 |