Report a correction

Use this form for factual errors, source updates, affected-artifact changes, coverage corrections, or safety concerns about Rails Active Storage: a crafted upload can write and read files on the server through ImageMagick and FFmpeg (GHSA-f3w6-w445-fwh9, GHSA-v924-7rp8-4mxh).

Do not submit secrets, exploit payloads, malware, personal data, or live credentials. This intake intentionally does not collect your name, email address, IP address, or user agent in the correction record.