Ruby on Rails 8.0.2.1 has been released to address two security issues: the RecordNotFound error by calling inspect on IDs and removing dangerous transformations in Active Storage.
Rails Release 8.0.2.1
Active Support
- No changes.
Active Model
- No changes.
Active Record
Call inspect on ids in RecordNotFound error
[CVE-2025-55193]
Gannon McGibbon, John Hawthorn
Action View
- No changes.
Action Pack
- No changes.
Active Job
- No changes.
Action Mailer
- No changes.
Action Cable
- No changes.
Active Storage
Remove dangerous transformations [CVE-2025-24293] *Zack Deveau*Action Mailbox
- No changes.
Action Text
- No changes.
Railties
- No changes.
Guides
- No changes.
