DHH(@dhh):You need to upgrade your Rails application right away if you're using Active Storage to store files and allow uploads from untrusted users. The underlying libvips used for image processing has a severe security issue. Great work by @flavorjones to lead the response on this.

DHH

@dhh

Father of three, Creator of Ruby on Rails + Omarchy, Co-owner & CTO of 37signals, Shopify director, NYT best-selling author, and Le Mans 24h class-winner.

加入 April 2008

211 正在關注 804.9K 粉絲

DHH@dhh

2026.07.29 15:50

You need to upgrade your Rails application right away if you're using Active Storage to store files and allow uploads from untrusted users. The underlying libvips used for image processing has a severe security issue. Great work by @flavorjones to lead the response on this.