Junglewise Threat Intelligence

ActiveRecord::Tenanted::Storage::DiskService#path_for has a possible path traversal

Severity: medium · CVSS 4 · Published 2026-07-29

Vendors: RubyGems.

Executive brief

ActiveRecord::Tenanted::Storage::DiskService#path_for has a possible path traversal

Affected products

  • RubyGems activerecord-tenanted

Related threats