A critical flaw in Ruby on Rails Active Storage lets an unauthenticated user upload a crafted image and make the server write files. If uploads use the Disk service, the same upload can make the server read files too. The…
A critical flaw in Ruby on Rails could allow an unauthenticated attacker to write arbitrary files on an app's server by uploading a crafted file if the app processes uploads using ImageMagick. The Rails project disclosed the flaw in an…
ActiveAdmin makes it quick to build an administrative interface in Rails, but the default interface is not always the right fit for a team. The harder part is often not writing CSS. It is choosing a theme without losing track…
CVE-2026-44266: Remote Code Execution in @enspirit/elo Ruby Compiler Backend via Unescaped String Interpolation Vulnerability ID: CVE-2026-44266 CVSS Score: 9.8 Published: 2026-11-03 CVE-2026-44266 (GHSA-7w38-ggh5-v542) is a code injection vulnerability in @enspirit/elo prior to version 1.0.1. The Ruby target compiler fails to escape the…
Scaling Core Apps For Delivery Hero, Local Delivery & Q-Commerce Giant How Vinted Expanded its Global Marketplace with On-Demand Team Extension Building Data Foundations: The Key to Scalable Enterprise AI Updated Mar 9, 2025 Do you sometimes need to make difficult changes in…
あなたの仕事と、大切なつながりを守るために — 第 3 回... Tagged with security. あなたの仕事と、大切なつながりを守るために — 第 3 回 Templates let you quickly answer FAQs or store snippets for re-use. Are you sure you want to hide this comment? It will become hidden in your post, but will…
Why use Scopes? & why is it useful A use case for scopes is often for filtering by status, date, date ranges, ordering, groupings, and more. Compared to class methods, scope methods are incredibly fast and quite easy to return the…
This tutorial explains how to configure Ruby on Rails in the development environment toward sending emails via Ruby on Rails Action Mailer integrated with the most popular email providers Gmail & SendGrid. Let’s take it step by step, first we need…
A Rails app needs three things from a host: a place to run Puma, a Postgres database it can reach, and a way to run db:migrate before traffic hits the new code. Ownkube covers all three without a cloud…
In September 2026, I released rspec-wasm, a tool for running RSpec tests on ruby.wasm, and introduced it in my previous DEV article: Stop Writing Ruby Tests in JS Template Literals: Meet rspec-wasm I've now released rspec-wasm v0.2.0, which adds support for…
Ruby, Rails, jobs, tooling, and performance changes.
An article joins this feed when it matches these terms. Each one is also a search of its own.