spree/spree — pull request #4544 by athal7 (2014-04-04 14:17:29+00:00)
Title: Explicitly include psych to leverage the libyaml security patch without ...

...relying on the version in the ruby standard library

https://www.ruby-lang.org/en/news/2014/03/29/heap-overflow-in-yaml-uri-escape-parsing-cve-2014-2525/