Lucene search
+L

1 matches found

OSV
OSV
added 2026/03/23 11:24 p.m.10 views

CVE-2026-33174 Rails Active Storage has a possible DoS vulnerability when in proxy mode via Range requests

Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, when serving files through Active Storage's proxy delivery mode, the proxy controller loads the entire requested byte range into memory before sending it. A request...

8.7CVSS5.8AI score
SaveExploits0References9
Rows per page
Query Builder