Ruby-concurrency - vulnerabilities (CVEs)

3 CVEs in 1 products, 0 in the last 30 days, newest from 2026-06-24.

Products

• Concurrent-ruby - 3 CVEs

Newest CVEs of Ruby-concurrency

• CVE-2026-54906 - CVSS 9.8 (critical), 2026-06-24: concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReadWriteLock#release_write_lock does not verify that the calling thread…
• CVE-2026-54904 - CVSS 8.2 (high), 2026-06-24: concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::AtomicReference#update can enter a permanent busy retry loop when the…
• CVE-2026-54905 - CVSS 5.5 (medium), 2026-06-24: concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReentrantReadWriteLock can incorrectly grant a write lock after one thread…