github.com
Possible arbitrary file read and remote code execution in Active Storage variant processing
### Impact
In its default configuration, a Rails application that displays image variants may allow an
unauthenticated attacker to read arbitrary files from the server, including the process envi...