Upgrade Rails to fix exploit