patch ruby security vulnerability