According to https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/c7jT-EeN9eI all version (as well 2.x) is affected.
According to https:/ /groups. google. com/forum/ ?fromgroups= #!topic/ rubyonrails- security/ c7jT-EeN9eI all version (as well 2.x) is affected.