Vulnerabilities in actionpack