Overview
Ruby on Rails is a full-stack web application framework. Default Active Storage image processing since Rails 7.0 uses libvips (variant_processor = :vips).
Recent Developments
- 2026-07-29: Patches cve-2026-66066 (CVSS 9.5) — arbitrary file read via Active Storage + libvips unfuzzed operations; fixed in Active Storage 7.2.3.2, 8.0.5.1, 8.1.3.1 (2026-08-01-rails-ghsa-xr9x-r78c-5hrm)
- EOL 7.1/7.0/6.x lack OSS fixes — teams on old majors need HeroDevs-style support or upgrade