It's a file which Ruby on Rails uses to keep track of currently used gem versions. Gems are just Ruby libraries.

So the app just runs through the list and check whether version of the gem is vulnerable or not.