rails/rails — comment on commit b83965785db1eec019edf1fc272b1aa393e6dc57
File:  line 0
By tadast:

Since you can commit to master, you could just fix the vulnerability :)
Also, Rails is open source - you get it for free, why not make it better for free as well?