therubyracer is a relic, it depends on an ancient version of v8 that has multiple known security vulnerabilities https://github.com/cowboyd/therubyracer/blob/master/therubyracer.gemspec#L20 In part...