Advisories for Gem/Clearance package

This affects the package clearance The vulnerability can be possible when users are able to set the value of session[:return_to].