Rails activestorage

• CVE-2026-33658 Low 2.3 Rails Active Storage has a possible DoS vulnerability in proxy mode via multi-range requests 0.5%
• CVE-2026-33202 Medium 6.6 Rails Active Storage has possible glob injection in its DiskService 0.7%
• CVE-2026-33195 High 8.1 Rails Active Storage has possible Path Traversal in DiskService 0.6%
• CVE-2026-33174 Medium 6.6 Rails Active Storage has a possible DoS vulnerability when in proxy mode via Range requests 0.6%
• CVE-2026-33173 Medium 5.3 Rails Active Storage has possible content type bypass via metadata in direct uploads 0.4%
• CVE-2025-24293 High 8.1 # Active Storage allowed transformation methods potentially unsafe Active Storage attempts to prevent the use of potentially unsafe image transformation methods and parameters by default. The d 5.6%