{"dataType":"CVE_RECORD","dataVersion":"1.0","cveMetadata":{"cveId":"GCVE-110-CERTCA-2026-1129","assignerOrgId":"","assignerShortName":"Vulnetix","state":"PUBLISHED","datePublished":"2026-11-05T15:41:50Z","dateUpdated":"","dateReserved":""},"containers":{"cna":{"providerMetadata":null,"title":"","descriptions":[{"lang":"en","value":"As of November 4, 2026, Rubyonrails is affected by a vulnerability in the following product:\nActive Storage\nPrior to 8.0.5.2\nPrior to 8.1.4.1\nThe Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.","supportingMedia":null},{"lang":"fr","value":"En date du 4 novembre 2026, Rubyonrails est touché par une vulnérabilité dans le produit suivant :\nActive Storage\nVersions antérieures à la version 8.0.5.2\nVersions antérieures à la version 8.1.4.1\nLe Centre pour la cybersécurité encourage les utilisateurs et les administrateurs à consulter les liens fournis et à installer les mises à jour nécessaires, dès qu'elles sont disponibles.","supportingMedia":null}],"references":[{"url":"https://cyber.gc.ca/en/alerts-advisories/rubyonrails-security-advisory-av26-1129","name":"","tags":["advisory"]},{"url":"https://github.com/rails/rails/releases/tag/v8.0.5.2","name":"","tags":["vendor"]},{"url":"https://github.com/rails/rails/releases/tag/v8.1.4.1","name":"","tags":["vendor"]},{"url":"https://github.com/rails/rails/security/advisories/GHSA-f3w6-w445-fwh9","name":"","tags":["vendor"]}],"metrics":null,"problemTypes":null,"affected":[{"vendor":"Prior","product":"Prior to 8.0.5.2","collectionURL":"","packageName":"","repo":"","defaultStatus":"","versions":null,"cpes":null,"modules":null,"programFiles":null,"platforms":null},{"vendor":"Prior","product":"Prior to 8.1.4.1","collectionURL":"","packageName":"","repo":"","defaultStatus":"","versions":null,"cpes":null,"modules":null,"programFiles":null,"platforms":null}],"cpeApplicability":null,"rejectedReasons":null,"replacedBy":null},"adp":null}}