Update rails for XML parsing vulnerability