Comment by steveklabnik

This is not that vulnerability. Their Rails is just fine. This is related to the fact that gems use YAML to store their metadata.