Multiple security issues were discovered in the Rails web framework
which could result cross-site scripting, information disclosure, denial
of service or bypass of content security policies.

https://security-tracker.debian.org/tracker/DSA-5881-1

Read More