February 18th CVEs

Brakeman 2.4.1 was branched directly from 2.4.0 and only includes CVE checks. Need to merge back into master.