Rails patches critical Active Storage flaw with RCE potential

Ruby on Rails has released fixes for a critical Active Storage vulnerability that could let unauthenticated attackers read arbitrary files from application servers through crafted

<h1> CVE-2026-33195: Path Traversal Vulnerability in Ruby on Rails Active Storage DiskService </h1> <blockquote> <p><strong>Vulnerability ID:</strong> CVE-2026-33195<br />

GitLab warned customers today to immediately patch a critical AI Gateway vulnerability that could let attackers run arbitrary commands on vulnerable instances. [...]

Threat actors have been observed attempting to exploit a recently patched critical security flaw in Gitea Docker images, according to Sysdig. The vulnerability in question is

Credit:&nbsp;Hacktron Vercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both of which allow unauthenticated remote code