My thanks to the original reporter of the vulnerability, and to the Rails folks for fixing it. I strongly recommend using at least one tool to help you know wh

My thanks to the original reporter of the vulnerability, and to the Rails folks for fixing it. I strongly recommend using at least one tool to help you know when a publicly known vulnerability is reported in a component you use. Then you can update, run your automated test, and immediately ship. Modern systems are typically mostly reused code. Being unprepared for vulnerabilities in them is a little crazy, because you know that such things will happen.