Given the severity, it'd almost be a public service to hit every public Rails server and exploit it to patch it with the security fix(es)...