On Saturday November 23rd, 2013, Heroku sent an email about CVE-2013-4164 to tell us to upgrade. Here is a script listing vulnerable apps.

gist.github.com

saved by: 0 people
related read on: Heap Overflow in Floating Point Parsing from the discussion