1 matches found
Ruby on Rails: Active Storage Vips Transformer Missing validate_transformation — CVE-2025-24293 Incomplete Fix
Summary The Active Storage Vips Transformer activestorage/lib/activestorage/transformers/vips.rb does not override validatetransformation. The ImageMagick transformer imagemagick.rb was hardened in the CVE-2025-24293 fix August 2025 with a method allowlist and argument denylist, but the Vips...
9.2CVSS6.2AI score0.05392EPSS
SaveExploits3
20