Patched Rails vulnerability