CVE-2026-126084

Active Storage is vulnerable to an unsigned Content-Type issue in GCS service direct uploads when the cache_control option is enabled. Prior to versions 8.1.4.1 and 8.0.5.2 , the ActiveStorage::Service::GCSService#url_for_direct_upload method signs URLs with V4, covering only the Cache-Control an...