2017/10/GHSA-qrgf-jqqm-x7xv Code injection in dragonfly gem