The version of RestClient specified in the gemspec has this security flaw: http://www.osvdb.org/show/osvdb/117461 I believe it should be updated to at least 1.7.3 https://github.com/rest-client/rest-client/blob/master/history.md