The gem httparty needs to be upgraded to 0.10.0 to avoid the parameter parsing vulnerability.

More on this issue can be found here: https://support.cloud.engineyard.com/entries/22915701-january-14-2013-security-vulnerabilities-httparty-extlib-crack-nori-update-these-gems-immediately