UnratedFix available
Rails 8.0.5.1
Type: patchSources: Ruby on Rails
Active Storage disables libvips loaders and savers marked unfuzzed or untrusted, preventing their use for untrusted content. The release requires libvips 8.13 and ruby-vips 2.2.1 when ruby-vips is installed.
- Products
- Active Storage
- Affected versions
- Not specified
- Fixed versions
- 8.0.5.1
- CVEs
- CVE-2026-66066
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 30 Oct 2026, 00:23 UTC · Revision 1
Source evidence
Active Storage disables libvips loaders and savers marked unfuzzed or untrusted, preventing their use for untrusted content. The release requires libvips 8.13 and ruby-vips 2.2.1 when ruby-vips is installed.
Active Storage Disable libvips's unfuzzed image loaders and savers.
Active Storage
Fixed versions: 8.0.5.1
Prerequisites: libvips is now 8.13; ruby-vips is now 2.2.1
Complete source record
{
"id": "b8a91279caff8af9e683bc66f8aaab2c4eb8d31908e0408575d4ebd38b2e8c10",
"url": "https://github.com/rails/rails/releases/tag/v8.0.5.1",
"method": "llm",
"payload": {
"kind": "patch",
"title": "Rails 8.0.5.1",
"summary": "Active Storage disables libvips loaders and savers marked unfuzzed or untrusted, preventing their use for untrusted content. The release requires libvips 8.13 and ruby-vips 2.2.1 when ruby-vips is installed.",
"evidence": "Active Storage Disable libvips's unfuzzed image loaders and savers.",
"products": [
{
"name": {
"value": "Active Storage",
"evidence": "Active Storage Disable libvips's unfuzzed image loaders and savers."
},
"prerequisites": [
{
"value": "libvips is now 8.13",
"evidence": "The minimum supported version of libvips is now 8.13"
},
{
"value": "ruby-vips is now 2.2.1",
"evidence": "the minimum supported version of ruby-vips is now 2.2.1"
}
],
"fixed_versions": [
{
"value": "8.0.5.1",
"evidence": "8.0.5.1"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"fixed_cves": [],
"related_cves": [
{
"value": "CVE-2026-66066",
"evidence": "[CVE-2026-66066]"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "github-rails-rails",
"document_id": 22376,
"published_at": "2026-07-29T15:08:22+00:00"
}