1. [CVE-2013-1855] XSS vulnerability in sanitize_css in Action Pack [1]
2. [CVE-2013-1856] XML Parsing Vulnerability affecting JRuby users [2]
3. [CVE-2013-1857] XSS Vulnerability in the `sanitize` helper of Ruby on Rails [3]
[1] https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/4_QHo4BqnN8 [2] https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/KZwsQbYsOiI [3] https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/zAAU7vGTPvI