I'm sure that Rails is great and powers many websites and that many devs loves it.

I'm also sure that people are working hard to fix these recent security issues and perfs issues.

But as a non-Rails dev I can tell you one thing: with all the attention that Rails got lately I'm sure I'll never be learning Ruby / Rails.

I'm into Clojure right now. Next target is Go.

Sadly all these Rails exploits do have a negative effect for Rails: I'm not saying this to criticize Rails. I'm saying this because I'm honestly 100% sure I'll never ever be doing anything serious with Rails and I know I'm not the only one in this case.

So, Rails devs, fix this and fix this rather sooner than later because every exploit is missed opportunities.