Patch Rails now: 21 security fixes in one release

#​825 — November 5, 2026 Read on the Web Ruby Weekly 🔒   Rails 8.0.5.2 and 8.1.4.1 Released to Fix 21 Security Issues — A rare 21-advisory release, led by a critical Active Storage bug (when using ImageMagick/ mini_magick ) where attaching a specially crafted image can let an uploader write (and sometimes read) arbitrary files. A Strong Parameters bypass, remote_ip spoofing in 8.1, and more make this a key update. Mike Dalessio (Rails Core) 💡 Christine Seeman's walkthrough covers the adv...