ActiveRecord Vulnerability - Circumvention of attr_protected 13 years ago
If you're using Bundler (which I assume you do, for Rails 3.0) tl;dr is changing from:
gem 'rails', '3.0.20'
to gem 'rails', github: 'rails/rails', branch: '3-0-stable'