More alarming than vulnerable gems is the the number oh high severity vulnerability found in Rails itself: http://www.cvedetails.com/product/22568/Rubyonrails-R

More alarming than vulnerable gems is the the number oh high severity vulnerability found in Rails itself: http://www.cvedetails.com/product/22568/Rubyonrails-Ruby-On-Rails.html?vendor_id=12043 http://www.cvedetails.com/product/22568/Rubyonrails-Ruby-On-.... Compare this to Django (http://www.cvedetails.com/vulnerability-list/vendor_id-10199/product_id-18211/year-2013/Djangoproject-Django.html http://www.cvedetails.com/vulnerability-list/vendor_id-10199...) per year.