A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-8185.json"