Curated security research, vulnerabilities, advisories and tools for practitioners.

#ruby-on-rails

Security coverage tagged ruby-on-rails.

1.

KindaRails2Shell - Critical RCE in Rails via Active Storage (CVE-2026-66066)

vulnerability | Critical | 2026-07-29 00:00 | CVE-2026-66066 | ethiack.com | original ↗ | #rce | #ruby-on-rails | #active-storage

2.

New Dojo sandbox environment for creating Ruby CTF challenges

blog | 2025-04-28 14:30 | yeswehack.com | original ↗ | #bug-bounty | #ruby-on-rails | #ruby

3.

Ruby Vulnerabilities: Exploiting Dangerous Open, Send and Deserialization Operations

vulnerability | 2022-05-17 00:00 | bishopfox.com | original ↗ | #rce | #ruby-on-rails | #ruby

4.

What We Can Learn from the Ruby on Rails Project about Code Review

blog | 2022-01-12 00:00 | hackerone.com | original ↗ | #ruby-on-rails | #open-source | #code-review

5.

Build a Simple API with Ruby on Rails

blog | 2021-10-08 01:10 | hackerone.com | original ↗ | #ruby-on-rails | #tutorial | #api

6.

Researcher Spotlight: Ambassador Dinesh V.

blog | 2019-02-07 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #ruby-on-rails | #bugcrowd

7.

Free Ruby Security Workshop

blog | 2013-06-03 16:15 | blog.trailofbits.com | original ↗ | #ruby-on-rails | #ruby | #deserialization