CVE-2026-66066 lets an unauthenticated upload read server files via Active Storage. Patching Rails is not enough - libvips must go to 8.13 and secrets rotate.
Reading this because something is going wrong?
A free code audit gives you a written assessment of your codebase in plain English.
