Update versus Rails Vulnerability