2017/10/GHSA-jxhw-mg8m-2pj8 Devise does not properly perform type conversion when performing database queries