Search

Language
RuffRuff Apps

RuffRuff apps are not affected by the Ruby on Rails (Active Storage) vulnerability｜RuffRuff Apps

Ruby on Railsの脆弱性（Active Storage）によるRuffRuff アプリへの影響はありません｜RuffRuff Apps

The RuffRuff apps provided by Tsun Inc. are not affected by the Ruby on Rails (Active Storage) vulnerability disclosed on November 4, 2026. None of our seven apps use Ruby on Rails.

The vulnerability is GHSA-f3w6-w445-fwh9 (CVE-2026-122006).

Apps covered by this notice

  • RuffRuff 予約販売
  • RuffRuff Order Limits
  • RuffRuff Order Bonus
  • RuffRuff Selling Periods
  • RuffRuff Table of Contents
  • RuffRuff Product & Blog Tags
  • RuffRuff Author Profiles

Impact

None of the seven apps listed above use Ruby on Rails. They are therefore not affected by this Active Storage vulnerability.

What store owners need to do

You do not need to change any RuffRuff app settings or reinstall the apps in response to this issue. You can continue using them as usual.

We will provide an update if the situation changes.

Reading next

チェックアウトルールを確認できないときの動作をアプリから変更できるようになりました｜RuffRuff 注文制限

You can now choose in the app what to do if a checkout rule can't be checked | RuffRuff Order Limits

Nov 2, 2026
IP許可リストによるAPIアクセス制限に対応しました｜RuffRuff Apps

Enabled API access restrictions with an IP allowlist | RuffRuff Apps

Nov 7, 2026

Changelog

View more articles
ルールの一括適用・一括解除で、対象の集計が終わらない不具合を修正しました｜RuffRuff 予約販売

Fixed an issue where counting targets did not finish in "Bulk apply or remove rules" | RuffRuff 予約販売

We fixed an issue in RuffRuff 予約販売 where counting the target variants in "Bulk apply or remove rules" sometimes did not finish. If a bulk action did not finish counting, start it again from "Review...

Nov 10, 2026
Tsun Inc.
セキュリティへの取り組みを公開しました｜RuffRuff Apps

We published "Our approach to security"｜RuffRuff Apps

We published a page, "Our approach to security", that summarizes the security measures in place across all seven RuffRuff apps. Store owners do not need to change settings or reinstall.

Nov 9, 2026
Tsun Inc.
有効期限付きアクセストークンへの移行に対応しました｜RuffRuff Apps

Added support for expiring access tokens | RuffRuff Apps

All seven RuffRuff apps now support expiring access tokens. No action is required from merchants.

Nov 9, 2026
Tsun Inc.
IP許可リストによるAPIアクセス制限に対応しました｜RuffRuff Apps

Enabled API access restrictions with an IP allowlist | RuffRuff Apps

All seven RuffRuff apps now use an IP allowlist to restrict API access. No action is required from merchants.

Nov 7, 2026
Tsun Inc.
チェックアウトルールを確認できないときの動作をアプリから変更できるようになりました｜RuffRuff 注文制限

You can now choose in the app what to do if a checkout rule can't be checked | RuffRuff Order Limits

RuffRuff Order Limits now lets you choose in the app whether to block purchases when a checkout rule can't be checked. Existing settings are kept unless you change them.

Nov 2, 2026
Tsun Inc.
サービス紹介動画をリニューアルしました｜RuffRuff Apps

We've refreshed our introduction videos | RuffRuff Apps

We have refreshed the introduction videos for all seven RuffRuff apps. Japanese and English videos are available (RuffRuff 予約販売 is Japanese only).

Oct 30, 2026
Tsun Inc.
GUIDE

Shopify guides

Clear, easy-to-follow, and accurate guides to Shopify sales tactics and how to use our apps.

[2026] Shopify BFCM Campaigns and Setup Examples | RuffRuff Apps Guide

Explore BFCM campaigns using four RuffRuff apps, with practical setup examples. This guide covers gifts, VIP early access, limited-time sales, cumulative purchase limits, and the apps and checks th...

Nov 3, 2026
Tsun Writer Team
How to Set Up Discounts on Subscription Products by Membership Rank in Shopify

How to Set Up Discounts on Subscription Products by Membership Rank in Shopify

Learn how to vary subscription prices by membership rank using Shopify Subscription. Using the RuffRuff Order Bonus app, this guide walks through — with screenshots — how to automatically apply a t...

Jul 7, 2026
Tsun Writer Team
How to Automatically Add a Promotional Gift After an Order on Shopify | Add It to the Order Without Putting It in the Cart

How to Automatically Add a Promotional Gift After an Order on Shopify | Add It to the Order Without Putting It in the Cart

A setup example for automatically adding a JPY 0 promotional gift after an order is created, without putting the gift in the cart. Covers eligibility requirements and how to verify the addition in ...

Oct 1, 2026
Tsun Writer Team

RuffRuff 注文制限の同梱ルール設定方法｜組み合わせと除外商品

単独購入、指定商品との同梱許可・必須、カタログなどの除外を、実際の設定画面で説明。対象商品の選び方から有効化、購入可否の確認方法まで紹介します。

Nov 5, 2026
Tsun Writer Team
Shopify Limited-Time Sale Guide: Comparing and Explaining 3 Methods

Shopify Limited-Time Sale Guide: Comparing and Explaining 3 Methods

A thorough guide to the three ways to run a limited-time sale on Shopify. Compares the built-in feature, manual setup, and dedicated apps, along with the pros and cons of each and how to use RuffR...

Apr 29, 2026
Tsun Writer Team
Add a table of contents to Shopify FAQs and guides

Add a table of contents to Shopify FAQs and guides

Use headings in FAQs and store guides to link readers to topics and questions. Covers page requirements, template placement, and checks after updates.

Oct 29, 2026
Tsun Writer Team
How to guide customers from Shopify product pages to related products using material and series tags

How to guide customers from Shopify product pages to related products using material and series tags

Display material or series tags on product pages to link to products sharing those tags. Learn how product URLs affect the filter scope, how to hide internal tags, and what to test after setup.

Oct 29, 2026
Tsun Writer Team
How to manage multiple writers on a Shopify blog: Author profiles and assignments

How to manage multiple writers on a Shopify blog: Author profiles and assignments

Assign the right writer to each post. This example explains author profiles, bulk assignment and removal, the one-author-per-post limit, and Shopify’s native author name.

Oct 29, 2026
Tsun Writer Team
How to Set Up Limited-Time Sales with RuffRuff Selling Periods | Start, End, and Testing

How to Set Up Limited-Time Sales with RuffRuff Selling Periods | Start, End, and Testing

Learn how to sell a product for a fixed period with RuffRuff Selling Periods, from setting start/end times and product messages to enabling and applying rules and testing purchase restrictions outs...

Nov 5, 2026
Tsun Writer Team

RuffRuff