Rails 3.0.18 have been released to address an SQL injection vulnerability in ActiveRecord.