Update to a less-vulnerable rails