Launchpad.net

CVE 2020-8185

A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.

See the CVE page on Mitre.org for more details.