Ruby-concurrency vulnerabilities
We track 2 vulnerabilities in Ruby-concurrency products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 24, 2026.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest Ruby-concurrency vulnerabilities
- 9.8 Critical severity
concurrent-ruby: Missing Lock Check
concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReadWriteLock#release_write_lock does not verify that the calling thread acquired the write lock. Any thread with access to the lock object can release an active write lock hel
- 7.5 High severity
concurrent-ruby: Loop with Unreachable Exit Condition
concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::AtomicReference#update can enter a permanent busy retry loop when the current value is Float::NAN. The issue is caused by the interaction between AtomicReference#update, which