CVE-2014-0081
CVE-2014-0080

Upgraded rails to 4.0.3.