Re:Rails 3.2.18, 4.0.5 and 4.1.1 have been released
by Tho85 on Tuesday May 06, 2014 @03:11PM
(#7706481)
For all those who can't upgrade to the latest versions of Rails: Zweitag (my employer) maintains a Rails fork with security fixes applied to all Rails releases since 3.1.0.
https://github.com/zweitag/rails/branches