CVE-2023-38037

An insecure temporary file vulnerability was found in activesupport rubygem. Contents that will be encrypted are written to a temporary file that has the user’s current umask settings, possibly leading to information disclosure by other users on the same system.

Mitigation

To work around this issue, users can set their umask to be more restrictive:
$ umask 0077