I'm keeping track of a list of vulnerable gems here: https://gist.github.com/4532291