Lucene search
+L

1 matches found

Hacker One
Hacker One
•added 2026/02/13 9:42 a.m.•38 views

Ruby on Rails: Active Storage Vips Transformer Missing validate_transformation — CVE-2025-24293 Incomplete Fix

Summary The Active Storage Vips Transformer activestorage/lib/activestorage/transformers/vips.rb does not override validatetransformation. The ImageMagick transformer imagemagick.rb was hardened in the CVE-2025-24293 fix August 2025 with a method allowlist and argument denylist, but the Vips...

9.2CVSS6.2AI score0.05392EPSS
SaveExploits3
Rows per page
Query Builder