diff --git a/.github/workflows/ruby.yml b/.github/workflows/ruby.yml
index d83fbd9185..26cbe8b50a 100644
--- a/.github/workflows/ruby.yml
+++ b/.github/workflows/ruby.yml
@@ -36,7 +36,7 @@ jobs:
       - name: Set up Python
         uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
         with:
-          python-version: 3.8
+          python-version: 3.12
       - name: Install yamllint
         run: |
           python -m pip install --upgrade pip
diff --git a/gems/activestorage/GHSA-f3w6-w445-fwh9.yml b/gems/activestorage/GHSA-f3w6-w445-fwh9.yml
index 068a5dccdb..790e347707 100644
--- a/gems/activestorage/GHSA-f3w6-w445-fwh9.yml
+++ b/gems/activestorage/GHSA-f3w6-w445-fwh9.yml
@@ -1,6 +1,7 @@
 ---
 gem: activestorage
 framework: rails
+cve: 2026-122006
 ghsa: f3w6-w445-fwh9
 url: https://github.com/rails/rails/security/advisories/GHSA-f3w6-w445-fwh9
 title: "Possible arbitrary file write and read in Active Storage image analysis"
@@ -109,13 +110,17 @@ patched_versions:
   - ">= 8.1.4.1"
 related:
   url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2026-122006
     - https://rubygems.org/gems/activestorage/versions/8.1.4.1
     - https://github.com/rails/rails/releases/tag/v8.1.4.1
     - https://rubygems.org/gems/activestorage/versions/8.0.5.2
     - https://github.com/rails/rails/releases/tag/v8.0.5.2
     - https://github.com/rails/rails/commit/468aa9a93fc98f5476b6821770f4ccfcb7f7d328
     - https://github.com/rails/rails/commit/ea8c40121ce53a3d0255cd4eb6d13bfe3bc01776
+    - https://github.com/advisories/GHSA-wgv4-95jc-33jm
     - https://github.com/rails/rails/security/advisories/GHSA-f3w6-w445-fwh9
+    - https://github.com/advisories/GHSA-f3w6-w445-fwh9
 notes: |
-  - No CVE.
-  - cvss_v3 from GHSA
+  - CVE from GHSA URL.
+  - cvss_v3 from GHSA URL.
+  - GHSA-wgv4-95jc-33jm appears to be a duplicate of GHSA-f3w6-w445-fwh9.
diff --git a/lib/rad-ignores.sh b/lib/rad-ignores.sh
index 2b9ce4e451..99e6d1f078 100755
--- a/lib/rad-ignores.sh
+++ b/lib/rad-ignores.sh
@@ -307,6 +307,9 @@ rm -f gems/shopify_app/CVE-2026-63414.yml \
       gems/crass/CVE-2026-61847.yml \
       gems/crass/CVE-2026-61848.yml
 
+# 11/6/2026: GHSA-wgv4-95jc-33jm appears to be a dupliate of GHSA-f3w6-w445-fwh9.
+rm -f gems/activestorage/CVE-2026-122006.yml
+
 # 9/4/2026: More duplicates and withdrawns
 # nokogiri  | https://github.com/advisories/GHSA-5jhf-fpp7-v2pv (duplicate)
 # nokogiri  | https://github.com/advisories/GHSA-xqqh-3w52-q8p7 (duplicate)