concurrent-ruby vulnerabilities

2 known vulnerabilities in concurrent-ruby from Ruby-concurrency. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  concurrent-ruby: Missing Lock Check

  CVE-2026-54906Jun 24, 2026Ruby-concurrency

  concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReadWriteLock#release_write_lock does not verify that the calling thread acquired the write lock. Any thread with access to the lock object can release an active write lock hel

• 7.5 High severity

  concurrent-ruby: Loop with Unreachable Exit Condition

  CVE-2026-54904Jun 24, 2026Ruby-concurrency

  concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::AtomicReference#update can enter a permanent busy retry loop when the current value is Float::NAN. The issue is caused by the interaction between AtomicReference#update, which