Active Storage (< 8.0.5.2, >= 8.1.0.beta1 < 8.1.4.1)

Ruby on Rails Active Storage is vulnerable to arbitrary file read and potential remote code execution because it uses user-supplied file extensions to determine how external processing tools like FFmpeg and ImageMagick handle uploaded attachments.