There were also a few other Rails CVEs announced today as well: CSRF Vulnerability in jquery-ujs / jquery-rails: https://groups.google.com/forum/#!topic/rubyon

There were also a few other Rails CVEs announced today as well: CSRF Vulnerability in jquery-ujs / jquery-rails: https://groups.google.com/forum/#!topic/rubyonrails-security/XIZPbobuwaY https://groups.google.com/forum/#!topic/rubyonrails-security... XSS in ActiveSupport::JSON.encode: https://groups.google.com/forum/#!topic/rubyonrails-security/7VlB_pck3hU https://groups.google.com/forum/#!topic/rubyonrails-security... IP Whitelist Bypass in Web Console: https://groups.google.com/forum/#!topic/rubyonrails-security/lzmz9_ijUFw https://groups.google.com/forum/#!topic/rubyonrails-security...