Upgraded to Rails 2.3.16, fixes JSON parser vulnerability.