MultiXml gem has same vulnerability as Rails' CVE-2013-0156 – patch now | Heykuki News