The go-to resource for upgrading Ruby, Rails, and your dependencies.
An in-depth look at CVE-2008-4094, a high-severity SQL injection vulnerability in early Ruby on Rails versions, and the importance of upgrading legacy systems.
Mar 15, 2026