If I download a fresh version of rails from http://rubyonrails.org/ is it vulnerable to this?