{"users":[{"id":127,"username":"tenderlove","name":"Aaron Patterson","avatar_template":"/user_avatar/discuss.rubyonrails.org/tenderlove/{size}/3541_2.png","primary_group_name":"core-team","admin":true,"trust_level":4},{"id":14211,"username":"rafaelfranca","name":"Rafael França","avatar_template":"/user_avatar/discuss.rubyonrails.org/rafaelfranca/{size}/616_2.png","primary_group_name":"core-team","admin":true,"trust_level":4},{"id":11809,"username":"flavorjones","name":"Mike Dalessio","avatar_template":"/user_avatar/discuss.rubyonrails.org/flavorjones/{size}/3884_2.png","admin":true,"trust_level":2},{"id":15518,"username":"samsaffron","name":"samsaffron","avatar_template":"/user_avatar/discuss.rubyonrails.org/samsaffron/{size}/596_2.png","admin":true,"moderator":true,"trust_level":4},{"id":19170,"username":"jhawthorn","name":"John Hawthorn","avatar_template":"/user_avatar/discuss.rubyonrails.org/jhawthorn/{size}/590_2.png","admin":true,"trust_level":4}],"primary_groups":[{"id":41,"name":"core-team"}],"flair_groups":[],"topic_list":{"can_create_topic":false,"filter":"latest","more_topics_url":"/c/security-announcements/9?page=1","per_page":30,"top_tags":[{"id":32,"name":"security","slug":"security"},{"id":2,"name":"announcement","slug":"announcement"},{"id":3,"name":"patch","slug":"patch"},{"id":18,"name":"rack","slug":"rack"},{"id":10,"name":"activerecord","slug":"activerecord"},{"id":33,"name":"actiondispatch","slug":"actiondispatch"},{"id":34,"name":"actioncontroller","slug":"actioncontroller"},{"id":31,"name":"activesupport","slug":"activesupport"},{"id":40,"name":"globalid","slug":"globalid"}],"topics":[{"fancy_title":"About the Security Announcements category","id":76367,"title":"About the Security Announcements category","slug":"about-the-security-announcements-category","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2020-10-16T15:23:49.370Z","last_posted_at":"2020-10-16T15:23:49.378Z","bumped":true,"bumped_at":"2021-02-10T21:40:21.552Z","archetype":"regular","unseen":false,"pinned":true,"unpinned":null,"excerpt":"In the category we will post all the security advisories for the Rails framework.","visible":true,"closed":true,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":4685,"like_count":2,"has_summary":false,"last_poster_username":"tenderlove","category_id":9,"op_like_count":2,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":127,"primary_group_id":41,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":14211,"primary_group_id":41,"flair_group_id":null}]},{"fancy_title":"[CVE-2026-66066] Attack details, and tools to perform a forensic investigation","id":91441,"title":"[CVE-2026-66066] Attack details, and tools to perform a forensic investigation","slug":"cve-2026-66066-attack-details-and-tools-to-perform-a-forensic-investigation","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2026-07-31T00:51:48.045Z","last_posted_at":"2026-08-01T06:00:10.882Z","bumped":true,"bumped_at":"2026-08-01T06:00:10.882Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":3467,"like_count":8,"has_summary":false,"last_poster_username":"samsaffron","category_id":9,"op_like_count":2,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":11809,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":15518,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"[CVE-2026-66066] Possible arbitrary file read and remote code execution in Active Storage variant processing","id":91432,"title":"[CVE-2026-66066] Possible arbitrary file read and remote code execution in Active Storage variant processing","slug":"cve-2026-66066-possible-arbitrary-file-read-and-remote-code-execution-in-active-storage-variant-processing","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-07-29T15:37:36.747Z","last_posted_at":"2026-07-29T15:37:36.837Z","bumped":true,"bumped_at":"2026-07-29T15:37:36.837Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":2,"name":"announcement","slug":"announcement"},{"id":32,"name":"security","slug":"security"}],"tags_descriptions":{},"views":10461,"like_count":9,"has_summary":false,"last_poster_username":"rafaelfranca","category_id":9,"op_like_count":9,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":14211,"primary_group_id":41,"flair_group_id":null}]},{"fancy_title":"[GHSA-cj75-f6xr-r4g7] Possible XSS vulnerability with certain configurations of rails-html-sanitizer","id":91359,"title":"[GHSA-cj75-f6xr-r4g7] Possible XSS vulnerability with certain configurations of rails-html-sanitizer","slug":"ghsa-cj75-f6xr-r4g7-possible-xss-vulnerability-with-certain-configurations-of-rails-html-sanitizer","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-07-16T03:08:03.051Z","last_posted_at":"2026-07-16T03:08:03.130Z","bumped":true,"bumped_at":"2026-07-16T03:08:03.130Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":290,"like_count":0,"has_summary":false,"last_poster_username":"flavorjones","category_id":9,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":11809,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"[CVE-2026-33167] Possible XSS vulnerability in Action Pack debug exceptions","id":90913,"title":"[CVE-2026-33167] Possible XSS vulnerability in Action Pack debug exceptions","slug":"cve-2026-33167-possible-xss-vulnerability-in-action-pack-debug-exceptions","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-03-23T21:26:10.466Z","last_posted_at":"2026-03-23T21:26:10.517Z","bumped":true,"bumped_at":"2026-03-23T21:26:10.517Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":2,"name":"announcement","slug":"announcement"},{"id":32,"name":"security","slug":"security"}],"tags_descriptions":{},"views":799,"like_count":2,"has_summary":false,"last_poster_username":"jhawthorn","category_id":9,"op_like_count":2,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":19170,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"[CVE-2026-33168] Possible XSS vulnerability in Action View tag helpers","id":90912,"title":"[CVE-2026-33168] Possible XSS vulnerability in Action View tag helpers","slug":"cve-2026-33168-possible-xss-vulnerability-in-action-view-tag-helpers","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-03-23T21:26:04.604Z","last_posted_at":"2026-03-23T21:26:04.652Z","bumped":true,"bumped_at":"2026-03-23T21:26:04.652Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":2,"name":"announcement","slug":"announcement"},{"id":32,"name":"security","slug":"security"}],"tags_descriptions":{},"views":440,"like_count":1,"has_summary":false,"last_poster_username":"jhawthorn","category_id":9,"op_like_count":1,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":19170,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"[CVE-2026-33169] Possible ReDoS vulnerability in number_to_delimited in Active Support","id":90911,"title":"[CVE-2026-33169] Possible ReDoS vulnerability in number_to_delimited in Active Support","slug":"cve-2026-33169-possible-redos-vulnerability-in-number-to-delimited-in-active-support","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-03-23T21:25:58.121Z","last_posted_at":"2026-03-23T21:25:58.178Z","bumped":true,"bumped_at":"2026-03-23T21:25:58.178Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":2,"name":"announcement","slug":"announcement"},{"id":32,"name":"security","slug":"security"}],"tags_descriptions":{},"views":379,"like_count":2,"has_summary":false,"last_poster_username":"jhawthorn","category_id":9,"op_like_count":2,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":19170,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"[CVE-2026-33170] Possible XSS vulnerability in SafeBuffer#% in Active Support","id":90910,"title":"[CVE-2026-33170] Possible XSS vulnerability in SafeBuffer#% in Active Support","slug":"cve-2026-33170-possible-xss-vulnerability-in-safebuffer-in-active-support","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-03-23T21:25:51.984Z","last_posted_at":"2026-03-23T21:25:52.034Z","bumped":true,"bumped_at":"2026-03-23T21:25:52.034Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":2,"name":"announcement","slug":"announcement"},{"id":32,"name":"security","slug":"security"}],"tags_descriptions":{},"views":376,"like_count":1,"has_summary":false,"last_poster_username":"jhawthorn","category_id":9,"op_like_count":1,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":19170,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"[CVE-2026-33173] Insufficient filtering of metadata in Active Storage direct uploads","id":90909,"title":"[CVE-2026-33173] Insufficient filtering of metadata in Active Storage direct uploads","slug":"cve-2026-33173-insufficient-filtering-of-metadata-in-active-storage-direct-uploads","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-03-23T21:25:45.411Z","last_posted_at":"2026-03-23T21:25:45.472Z","bumped":true,"bumped_at":"2026-03-23T21:25:45.472Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":2,"name":"announcement","slug":"announcement"},{"id":32,"name":"security","slug":"security"}],"tags_descriptions":{},"views":331,"like_count":3,"has_summary":false,"last_poster_username":"jhawthorn","category_id":9,"op_like_count":3,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":19170,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"[CVE-2026-33174] Possible DoS vulnerability in Active Storage proxy mode via Range requests","id":90908,"title":"[CVE-2026-33174] Possible DoS vulnerability in Active Storage proxy mode via Range requests","slug":"cve-2026-33174-possible-dos-vulnerability-in-active-storage-proxy-mode-via-range-requests","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-03-23T21:25:39.314Z","last_posted_at":"2026-03-23T21:25:39.361Z","bumped":true,"bumped_at":"2026-03-23T21:25:39.361Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":2,"name":"announcement","slug":"announcement"},{"id":32,"name":"security","slug":"security"}],"tags_descriptions":{},"views":311,"like_count":1,"has_summary":false,"last_poster_username":"jhawthorn","category_id":9,"op_like_count":1,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":19170,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"[CVE-2026-33176] Possible DoS vulnerability in Active Support number helpers","id":90907,"title":"[CVE-2026-33176] Possible DoS vulnerability in Active Support number helpers","slug":"cve-2026-33176-possible-dos-vulnerability-in-active-support-number-helpers","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-03-23T21:25:34.770Z","last_posted_at":"2026-03-23T21:25:34.820Z","bumped":true,"bumped_at":"2026-03-23T21:25:34.820Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":2,"name":"announcement","slug":"announcement"},{"id":32,"name":"security","slug":"security"}],"tags_descriptions":{},"views":379,"like_count":2,"has_summary":false,"last_poster_username":"jhawthorn","category_id":9,"op_like_count":2,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":19170,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"[CVE-2026-33658] Possible DoS vulnerability in Active Storage proxy mode via multi-range requests","id":90906,"title":"[CVE-2026-33658] Possible DoS vulnerability in Active Storage proxy mode via multi-range requests","slug":"cve-2026-33658-possible-dos-vulnerability-in-active-storage-proxy-mode-via-multi-range-requests","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-03-23T21:25:29.833Z","last_posted_at":"2026-03-23T21:25:29.881Z","bumped":true,"bumped_at":"2026-03-23T21:25:29.881Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":2,"name":"announcement","slug":"announcement"},{"id":32,"name":"security","slug":"security"}],"tags_descriptions":{},"views":408,"like_count":0,"has_summary":false,"last_poster_username":"jhawthorn","category_id":9,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":19170,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"This was a previous vulnerability re-published by mistake. Please ignore CVE-2026-33178","id":90905,"title":"This was a previous vulnerability re-published by mistake. Please ignore CVE-2026-33178","slug":"this-was-a-previous-vulnerability-re-published-by-mistake-please-ignore-cve-2026-33178","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-03-23T21:25:27.030Z","last_posted_at":"2026-03-23T21:25:27.088Z","bumped":true,"bumped_at":"2026-03-23T21:25:27.088Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":2,"name":"announcement","slug":"announcement"},{"id":32,"name":"security","slug":"security"}],"tags_descriptions":{},"views":98,"like_count":1,"has_summary":false,"last_poster_username":"jhawthorn","category_id":9,"op_like_count":1,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":19170,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"[CVE-2026-33195] Possible path traversal in Active Storage DiskService","id":90904,"title":"[CVE-2026-33195] Possible path traversal in Active Storage DiskService","slug":"cve-2026-33195-possible-path-traversal-in-active-storage-diskservice","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-03-23T21:25:21.767Z","last_posted_at":"2026-03-23T21:25:21.830Z","bumped":true,"bumped_at":"2026-03-23T21:25:21.830Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":2,"name":"announcement","slug":"announcement"},{"id":32,"name":"security","slug":"security"}],"tags_descriptions":{},"views":354,"like_count":1,"has_summary":false,"last_poster_username":"jhawthorn","category_id":9,"op_like_count":1,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":19170,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"[CVE-2026-33202] Possible glob injection in Active Storage DiskService","id":90903,"title":"[CVE-2026-33202] Possible glob injection in Active Storage DiskService","slug":"cve-2026-33202-possible-glob-injection-in-active-storage-diskservice","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-03-23T21:25:17.030Z","last_posted_at":"2026-03-23T21:25:17.083Z","bumped":true,"bumped_at":"2026-03-23T21:25:17.083Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":2,"name":"announcement","slug":"announcement"},{"id":32,"name":"security","slug":"security"}],"tags_descriptions":{},"views":314,"like_count":1,"has_summary":false,"last_poster_username":"jhawthorn","category_id":9,"op_like_count":1,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":19170,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"[CVE-2025-24293] Active Storage allowed transformation methods potentially unsafe","id":89670,"title":"[CVE-2025-24293] Active Storage allowed transformation methods potentially unsafe","slug":"cve-2025-24293-active-storage-allowed-transformation-methods-potentially-unsafe","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2025-08-13T20:46:54.589Z","last_posted_at":"2025-08-13T20:46:54.639Z","bumped":true,"bumped_at":"2025-08-13T20:46:54.639Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":2,"name":"announcement","slug":"announcement"},{"id":32,"name":"security","slug":"security"}],"tags_descriptions":{},"views":1978,"like_count":0,"has_summary":false,"last_poster_username":"jhawthorn","category_id":9,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":19170,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"[CVE-2025-55193] ANSI escape injection in Active Record logging","id":89669,"title":"[CVE-2025-55193] ANSI escape injection in Active Record logging","slug":"cve-2025-55193-ansi-escape-injection-in-active-record-logging","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2025-08-13T20:46:51.004Z","last_posted_at":"2025-08-13T20:46:51.062Z","bumped":true,"bumped_at":"2025-08-13T20:46:51.062Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":2,"name":"announcement","slug":"announcement"},{"id":32,"name":"security","slug":"security"}],"tags_descriptions":{},"views":1113,"like_count":0,"has_summary":false,"last_poster_username":"jhawthorn","category_id":9,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":19170,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"[CVE-2024-47889] Possible ReDoS vulnerability in block_format in Action Mailer","id":87695,"title":"[CVE-2024-47889] Possible ReDoS vulnerability in block_format in Action Mailer","slug":"cve-2024-47889-possible-redos-vulnerability-in-block-format-in-action-mailer","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2024-10-15T21:00:07.570Z","last_posted_at":"2024-10-15T21:00:07.622Z","bumped":true,"bumped_at":"2025-01-07T21:16:49.475Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":32,"name":"security","slug":"security"}],"tags_descriptions":{},"views":936,"like_count":3,"has_summary":false,"last_poster_username":"jhawthorn","category_id":9,"op_like_count":3,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":19170,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"[CVE-2024-54133] Possible Content Security Policy bypass in Action Dispatch","id":88178,"title":"[CVE-2024-54133] Possible Content Security Policy bypass in Action Dispatch","slug":"cve-2024-54133-possible-content-security-policy-bypass-in-action-dispatch","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2024-12-10T21:54:19.028Z","last_posted_at":"2024-12-10T21:54:19.089Z","bumped":true,"bumped_at":"2024-12-10T21:54:19.089Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":2,"name":"announcement","slug":"announcement"},{"id":32,"name":"security","slug":"security"}],"tags_descriptions":{},"views":1442,"like_count":3,"has_summary":false,"last_poster_username":"jhawthorn","category_id":9,"op_like_count":3,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":19170,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Rails-html-sanitizer v1.6.1 addresses multiple CVEs","id":88092,"title":"Rails-html-sanitizer v1.6.1 addresses multiple CVEs","slug":"rails-html-sanitizer-v1-6-1-addresses-multiple-cves","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2024-12-02T20:59:07.509Z","last_posted_at":"2024-12-02T20:59:07.562Z","bumped":true,"bumped_at":"2024-12-02T20:59:07.562Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":612,"like_count":3,"has_summary":false,"last_poster_username":"flavorjones","category_id":9,"op_like_count":3,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":11809,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"[CVE-2024-47888] Possible ReDoS vulnerability in plain_text_for_blockquote_node in Action Text","id":87696,"title":"[CVE-2024-47888] Possible ReDoS vulnerability in plain_text_for_blockquote_node in Action Text","slug":"cve-2024-47888-possible-redos-vulnerability-in-plain-text-for-blockquote-node-in-action-text","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2024-10-15T21:04:36.502Z","last_posted_at":"2024-10-15T21:04:36.543Z","bumped":true,"bumped_at":"2024-10-15T21:12:11.507Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":32,"name":"security","slug":"security"}],"tags_descriptions":{},"views":610,"like_count":1,"has_summary":false,"last_poster_username":"jhawthorn","category_id":9,"op_like_count":1,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":19170,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"[CVE-2024-41128] Possible ReDoS vulnerability in query parameter filtering in Action Dispatch","id":87699,"title":"[CVE-2024-41128] Possible ReDoS vulnerability in query parameter filtering in Action Dispatch","slug":"cve-2024-41128-possible-redos-vulnerability-in-query-parameter-filtering-in-action-dispatch","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2024-10-15T21:10:52.797Z","last_posted_at":"2024-10-15T21:10:52.847Z","bumped":true,"bumped_at":"2024-10-15T21:10:52.847Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":32,"name":"security","slug":"security"}],"tags_descriptions":{},"views":845,"like_count":1,"has_summary":false,"last_poster_username":"jhawthorn","category_id":9,"op_like_count":1,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":19170,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"[CVE-2024-47887] Possible ReDoS vulnerability in HTTP Token authentication in Action Controller","id":87698,"title":"[CVE-2024-47887] Possible ReDoS vulnerability in HTTP Token authentication in Action Controller","slug":"cve-2024-47887-possible-redos-vulnerability-in-http-token-authentication-in-action-controller","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2024-10-15T21:07:54.493Z","last_posted_at":"2024-10-15T21:07:54.542Z","bumped":true,"bumped_at":"2024-10-15T21:07:54.542Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":32,"name":"security","slug":"security"}],"tags_descriptions":{},"views":932,"like_count":2,"has_summary":false,"last_poster_username":"jhawthorn","category_id":9,"op_like_count":2,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":19170,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"[CVE-2024-32464] ActionText ContentAttachment’s can Contain Unsanitized HTML","id":85949,"title":"[CVE-2024-32464] ActionText ContentAttachment's can Contain Unsanitized HTML","slug":"cve-2024-32464-actiontext-contentattachments-can-contain-unsanitized-html","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2024-06-04T18:10:16.614Z","last_posted_at":"2024-06-04T18:10:16.681Z","bumped":true,"bumped_at":"2024-06-04T18:10:16.681Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":2352,"like_count":2,"has_summary":false,"last_poster_username":"tenderlove","category_id":9,"op_like_count":2,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":127,"primary_group_id":41,"flair_group_id":null}]},{"fancy_title":"[CVE-2024-28103] Permissions-Policy is Only Served on HTML Content-Type","id":85948,"title":"[CVE-2024-28103] Permissions-Policy is Only Served on HTML Content-Type","slug":"cve-2024-28103-permissions-policy-is-only-served-on-html-content-type","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2024-06-04T18:09:01.072Z","last_posted_at":"2024-06-04T18:09:01.145Z","bumped":true,"bumped_at":"2024-06-04T18:09:01.145Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":1937,"like_count":2,"has_summary":false,"last_poster_username":"tenderlove","category_id":9,"op_like_count":2,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":127,"primary_group_id":41,"flair_group_id":null}]},{"fancy_title":"XSS Vulnerabilities in Trix Editor","id":85803,"title":"XSS Vulnerabilities in Trix Editor","slug":"xss-vulnerabilities-in-trix-editor","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2024-05-17T16:57:24.693Z","last_posted_at":"2024-05-17T16:57:24.773Z","bumped":true,"bumped_at":"2024-05-17T16:57:24.773Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":2,"name":"announcement","slug":"announcement"}],"tags_descriptions":{},"views":1873,"like_count":3,"has_summary":false,"last_poster_username":"rafaelfranca","category_id":9,"op_like_count":3,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":14211,"primary_group_id":41,"flair_group_id":null}]},{"fancy_title":"Possible XSS Vulnerability in Action Controller","id":84947,"title":"Possible XSS Vulnerability in Action Controller","slug":"possible-xss-vulnerability-in-action-controller","posts_count":3,"reply_count":0,"highest_post_number":3,"image_url":null,"created_at":"2024-02-21T20:44:26.750Z","last_posted_at":"2024-02-27T01:30:06.624Z","bumped":true,"bumped_at":"2024-02-27T01:30:06.624Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":2,"name":"announcement","slug":"announcement"},{"id":3,"name":"patch","slug":"patch"}],"tags_descriptions":{},"views":8184,"like_count":6,"has_summary":false,"last_poster_username":"rafaelfranca","category_id":9,"op_like_count":3,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":127,"primary_group_id":41,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":19170,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":14211,"primary_group_id":41,"flair_group_id":null}]},{"fancy_title":"Possible Denial of Service Vulnerability in Rack Header Parsing","id":84942,"title":"Possible Denial of Service Vulnerability in Rack Header Parsing","slug":"possible-denial-of-service-vulnerability-in-rack-header-parsing","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2024-02-21T20:32:24.323Z","last_posted_at":"2024-02-21T20:32:24.475Z","bumped":true,"bumped_at":"2024-02-21T22:51:56.356Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":2,"name":"announcement","slug":"announcement"},{"id":18,"name":"rack","slug":"rack"}],"tags_descriptions":{},"views":4727,"like_count":1,"has_summary":false,"last_poster_username":"tenderlove","category_id":9,"op_like_count":1,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":127,"primary_group_id":41,"flair_group_id":null}]},{"fancy_title":"Possible ReDoS vulnerability in Accept header parsing in Action Dispatch","id":84946,"title":"Possible ReDoS vulnerability in Accept header parsing in Action Dispatch","slug":"possible-redos-vulnerability-in-accept-header-parsing-in-action-dispatch","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2024-02-21T20:41:44.530Z","last_posted_at":"2024-02-21T20:41:44.594Z","bumped":true,"bumped_at":"2024-02-21T22:51:31.818Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":2,"name":"announcement","slug":"announcement"},{"id":3,"name":"patch","slug":"patch"}],"tags_descriptions":{},"views":3984,"like_count":2,"has_summary":false,"last_poster_username":"tenderlove","category_id":9,"op_like_count":2,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":127,"primary_group_id":41,"flair_group_id":null}]},{"fancy_title":"Denial of Service Vulnerability in Rack Content-Type Parsing","id":84941,"title":"Denial of Service Vulnerability in Rack Content-Type Parsing","slug":"denial-of-service-vulnerability-in-rack-content-type-parsing","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2024-02-21T20:30:23.479Z","last_posted_at":"2024-02-21T20:30:23.555Z","bumped":true,"bumped_at":"2024-02-21T22:50:32.167Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":2,"name":"announcement","slug":"announcement"},{"id":18,"name":"rack","slug":"rack"}],"tags_descriptions":{},"views":5097,"like_count":2,"has_summary":false,"last_poster_username":"tenderlove","category_id":9,"op_like_count":2,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":127,"primary_group_id":41,"flair_group_id":null}]}]}}