https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:52:26.113722+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-07239 bdu:2026-07239 2026-10-02T20:52:26.205492+00:00 bdu:2026-07239 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0349 certfr-2026-avi-0349 — De multiples vulnérabilités ont été découvertes dans les produits Ruby on Rails. Certaines d'entre elles permettent à u… 2026-10-02T20:52:26.205532+00:00 certfr-2026-avi-0349 https://cve.radiocsirt.org/vuln/euvd-2026-277974 EUVD-2026-277974 2026-10-02T20:52:26.205552+00:00 EUVD-2026-277974 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33658 fkie_cve-2026-33658 2026-10-02T20:52:26.205564+00:00

Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1 Active Storage's proxy controller does not limit the number of byte ranges in an HTTP Range header. A request with thousands of small ranges causes disproportionate CPU usage compared to a normal request for the same file, possibly resulting in a DoS vulnerability. Versions 8.1.2.1, 8.0.4.1, and 7.2.3.1 contain a patch.

 https://cve.radiocsirt.org/vuln/ghsa-p9fm-f462-ggrg GHSA-p9fm-f462-ggrg — Rails Active Storage has a possible DoS vulnerability in proxy mode via multi-range requests 2026-10-02T20:52:26.205596+00:00

Affected: RubyGems: activestorage

### Impact Active Storage's proxy controller does not limit the number of byte ranges in an HTTP Range header. A request with thousands of small ranges causes disproportionate CPU usage compared to a normal request for the same file, possibly resulting in a DoS vulnerability.

### Releases The fixed releases are available at the normal locations.

### Credit This issue was responsibly reported by Hackerone researcher [thwin_htet](https://hackerone.com/thwin_htet).

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-33658 UBUNTU-CVE-2026-33658 2026-10-02T20:52:26.205627+00:00

Affected: Ubuntu:Pro:16.04:LTS: rails, Ubuntu:Pro:18.04:LTS: rails, Ubuntu:Pro:20.04:LTS: rails, Ubuntu:Pro:22.04:LTS: rails, Ubuntu:24.04:LTS: rails, Ubuntu:25.10: rails, Ubuntu:26.04:LTS: rails

Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1 Active Storage's proxy controller does not limit the number of byte ranges in an HTTP Range header. A request with thousands of small ranges causes disproportionate CPU usage compared to a normal request for the same file, possibly resulting in a DoS vulnerability. Versions 8.1.2.1, 8.0.4.1, and 7.2.3.1 contain a patch.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0833 WID-SEC-W-2026-0833 — Ruby on Rails: Mehrere Schwachstellen 2026-10-02T20:52:26.205659+00:00

Ein Angreifer kann mehrere Schwachstellen in Ruby on Rails ausnutzen, um einen Denial of Service Angriff durchzuführen, um Dateien zu manipulieren, und um einen Cross-Site Scripting Angriff durchzuführen.