[Aikido] Fix 15 security issues in activestorage, msgpack, erb and 4 more

[aikido-autofix]

Upgrade dependencies to fix critical security vulnerabilities: Active Storage arbitrary file read via unsafe libvips operations, MessagePack data leakage/corruption and DoS, ERB code execution via marshal deserialization, and RBS parser DoS/crash on invalid input.

✅ 15 CVEs resolved by this upgrade

This PR will resolve the following CVEs:

Issue	Severity	Description
CVE-2026-66066	MEDIUM	[activestorage] Unsafe libvips operations are not disabled for untrusted image uploads, allowing attackers to read arbitrary files and environment variables accessible to the Rails process. This can lead to credential exposure and remote code execution.
AIKIDO-2026-333731	MEDIUM	[activestorage] Crafted uploaded images can exploit libvips unfuzzed loaders/savers to read arbitrary files and environment variables during variant processing, potentially leading to RCE. An unauthenticated attacker can trigger this via file upload and variant processing to access sensitive credentials.
AIKIDO-2026-963257	MEDIUM	[msgpack] A memory ownership bug allows chunks from released pages to be reused by other buffers, causing data leaks and corruption across requests. Additionally, deeply nested recursive extensions can crash the VM instead of raising a proper stack error.
AIKIDO-2026-467095	MEDIUM	[erb] A marshal deserialization vulnerability allows attackers to bypass execution guards in ERB by overriding the equal? method on a crafted @_init object, enabling arbitrary code execution through template evaluation. The fix uses BasicObject#equal? to prevent the bypass.
AIKIDO-2026-652269	LOW	[rbs] The RBS parser's C lexer fails to advance when encountering invalid bytes in the input encoding, causing infinite loops while holding the VM lock or process crashes. This allows denial of service attacks when parsing untrusted signature text.
GHSA-cj75-f6xr-r4g7	LOW	[rails-html-sanitizer] A cross-site scripting (XSS) vulnerability exists when the sanitizer is configured to allow SVG reference elements like <use>. This permits attackers to inject malicious scripts through SVG local references.
AIKIDO-2026-663658	LOW	[rails-html-sanitizer] A Cross-site Scripting (XSS) vulnerability exists due to incomplete attribute restrictions on SVG elements, allowing href attributes to reference external documents and potentially execute scripts or load external content for tracking purposes.
AIKIDO-2026-622262	LOW	[loofah] HTML5 sanitizer fails to restrict the href attribute on SVG elements, allowing Cross-site Scripting (XSS) attacks through external document references in elements like <use> and <feImage>. This enables arbitrary script execution or external content loading when sanitizing user-supplied SVG.
GHSA-9wjq-cp2p-hrgf	LOW	[loofah] Loofah's HTML5 sanitizer failed to restrict the href attribute on SVG elements, allowing external document references that could execute scripts or enable tracking through SVG and elements.
AIKIDO-2026-349881	LOW	[loofah] A Cross-site Scripting (XSS) vulnerability exists due to improper validation of URIs with numeric character references lacking trailing semicolons, allowing malicious scripts like javascript&#58alert(1) to bypass filtering and execute in browsers.
AIKIDO-2026-498891	LOW	[loofah] A vulnerability in the allowed_uri? helper fails to reject javascript: URIs when the scheme is split by HTML5 named character references like &Tab; or &NewLine;, allowing attackers to bypass URI validation and execute arbitrary JavaScript. This affects callers of the public helper method and higher-level features like Action Text markdown link validation that render approved URIs into HTML attributes.
GHSA-5qhf-9phg-95m2	LOW	[loofah] A bypass vulnerability in URI validation allows javascript: and vbscript: schemes to evade filtering when split by numeric character references without trailing semicolons, enabling XSS attacks through browser URI decoding.
GHSA-8whx-365g-h9vv	LOW	[loofah] A bypass vulnerability in URI scheme validation allows javascript: URIs to be executed when prefixed with HTML5 named character references ( or ), circumventing existing security filters and enabling XSS attacks.
AIKIDO-2026-769167	LOW	[json] A heap use-after-free vulnerability in the resumable parser allows attackers to crash the Ruby process by feeding crafted truncated JSON with duplicate keys and calling partial_value, which reads freed memory through stale state pointers.
CVE-2026-71847	LOW	[json] A heap-use-after-free vulnerability in the native C extension allows attackers to cause process termination (DoS) by supplying malicious JSON stream data with duplicate keys to applications using JSON::ResumableParser's partial_value method.

🔗 Related Tasks

• https://aikido.atlassian.net/browse/AIK-18256

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[aikido-autofix]

Closed by Aikido: a new AutoFix has been created → #373