Ruby on Rails
ProductRuby on Rails is a server-side web application framework written in Ruby under the MIT License. Rails is a model–view–controller (MVC) framework, providing default structures for a database, a web service, and web pages. It encourages and facilitates the use of web standards such as JSON or XML for data transfer and HTML, CSS and JavaScript for user interfacing. In addition to MVC, Rails emphasizes the use of other well-known software engineering patterns and paradigms, including convention over configuration (CoC), don't repeat yourself (DRY), and the active record pattern.
From Wikipedia, licensed under CC BY-SA 4.0. Shown as published there.
Facts
- Made by
- David Heinemeier HanssonSource: Wikidata
- First released
- 2004Source: Wikidata
- Latest version
- 8.1.3 (2026)Source: Wikidata
- Licence
- MIT LicenseSource: Wikidata
- Runs on
- Unix-like operating systemSource: Wikidata
- Official website
- rubyonrails.orgSource: Wikidata
- Wikipedia
- Read on WikipediaSource: Wikidata
Am I affected?
Checked against NVD affected-version data on our server. Nothing you type is stored.
Security timeline
- Vulnerability reported by The Hacker NewsCritical Ruby on Rails flaw lets attackers write server files via crafted ImageMagick uploads
Recent news
Critical Ruby on Rails flaw lets attackers write server files via crafted ImageMagick uploads
A critical unauthenticated file-write flaw affects Ruby on Rails apps that process uploads through Active Storage with ImageMagick. A crafted upload can write arbitrary files on the server. The Rails project has fixed it in versions 8.1.4.1 and 8.0.5.2.
AO3 fanfiction archive offline for weeks after security incident
The Organization for Transformative Works, which runs Archive of Our Own (AO3), says a security incident has taken the site down for maintenance. Restoration is estimated at about two weeks and could take up to a month. The operator says it does not expect any data loss, and it has ruled out a link to the recent PHP security issue because AO3 runs on Ruby on Rails.