Code Audit on Ruby on Rails

The security review of Ruby on Rails v8.0.1 performed by X41 between December 2024 and March 2025 has identified several areas where improvements can be made to ensure robust security. The test was organized by the Open Source Technology -Improvement Fund1 . GitLab2 directly supported the assessment by sponsoring participation of the GitLab Security Research Team3 in the audit. A total of seven vulnerabilities were discovered during the test by X41. None were rated as having a critical severity, one as high, none as medium, and six as low. Additionally, six issues without a direct security impact were identified.