DHH
There's now an agent skill set available for dealing with this CVE. Helps you determine whether you were ever exposed to this issue, and making sure you're properly patched. Great use of AI! https://github.com/rails/rails-forensics-CVE-2026-66066
DHH
You need to upgrade your Rails application right away if you're using Active Storage to store files and allow uploads from untrusted users. The underlying libvips used for image processing has a severe security issue. Great work by @flavorjones to lead the response on this.