CVE-2026-126188: rails: Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record…

Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record objects. Prior to 8.0.5.2 and from 8.1 until 8.1.4.1, Active Storage's ActiveStorage::Previewer::VideoPreviewer, ActiveStorage::Analyzer::VideoAnalyzer, and...

CVE-2026-126188

Active Storage in Rails versions prior to 8.0.5.2 and between 8.1 and 8.1.4.1 is vulnerable to local file disclosure . The issue exists in ActiveStorage::Previewer::VideoPreviewer, ActiveStorage::Analyzer::VideoAnalyzer, and ActiveStorage::Analyzer::AudioAnalyzer because they pass uploaded blob c...

PT-2026-144859

Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record objects. Prior to 8.0.5.2 and from 8.1 until 8.1.4.1, Active Storage's ActiveStorage::Previewer::VideoPreviewer, ActiveStorage::Analyzer::VideoAnalyzer, and...

Malware in arm-videoanalyzer

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2022-1115 Malicious code in arm-videoanalyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f39dca054bbd4f9bec0819add6b85d88265fcd32be99943ff9f4635301d23673 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...