datamapper/extlib — pull request #5 by JakubOboza (2013-01-08 09:47:03+00:00)
Title: Security fix for YAML being loaded while parsing XML.

Because Merb is using this in line
270 Hash.from_xml(raw_post) of request.rb file to parse request it is unsafe.
This problem may affect all merbs apps out there.