Update Rails to the one without the XML vuln