ruby vulnerability