DHH has just announced the release of Rails 1.1.3.
We've found and fixed a security issue with routing that could cause excess CPU usage in Rails processes when triggered by certain URLs. We strongly encourage anyone running 1.1.x to upgrade to the latest version. It's fully backwards compatible and should serve as a small drop-in fix.