Blog

Browse through our blog page filled with updated information and the latest tips to help you achieve your goals.

Rails CVE-2026-41316: Detection and Patch

CVSS 8.1 universal RCE chain through ERB::DeprecatedInstanceVariableProxy and Marshal.load. Detection, upgrade path, Rails 7.0/7.1 EOL options.

Rails CVE-2026-66066: Patch Isn't Enough

#rails #security #cve #active-storage #devops

CVE-2026-66066 lets an unauthenticated upload read server files via Active Storage. Patching Rails is not enough - libvips must go to 8.13 and secrets rotate.

Rails 7 End of Life: Pick Your Exit

#rails #security #cve #upgrade

Rails 7.1 got no patch for CVE-2026-66066, a CVSSv4 9.5 pre-auth RCE. How to find every app of yours on a dead branch and pick between four realistic exits.