rails/rails — Issue #5295: Mass assignment vulnerability still exists, github compromised
Author: inferiorhumanorgans
Created: 2012-03-06 00:47:46+00:00
State: open

http://arstechnica.com/business/news/2012/03/hacker-commandeers-github-to-prove-vuln-in-ruby.ars

'Nuff said.