Updated Rails, security vulnerability