Post
FastRuby.io
fastruby.io
did:plc:2nka6vsspwyeczmkgkgi6k4u
Bumping activestorage to 8.1.3.1 does not fix CVE-2026-66066 by itself. The fix needs libvips 8.13+, and rebuilding on a Debian bullseye base quietly reinstalls 8.10.5 every time. go.fastruby.io/vdx #RailsSecurity
2026-08-24T15:02:33.065Z