What’s Vulnerable › Products

ruby-concurrency concurrent-ruby vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your ruby-concurrency concurrent-ruby version is affected

Latest ruby-concurrency concurrent-ruby vulnerabilities

• CVE-2026-54906 — concurrent-ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption (CVSS 9.8)
• CVE-2026-54905 — concurrent-ruby: `ReentrantReadWriteLock` read-count overflow grants a write lock without exclusivity (CVSS 5.5)
• CVE-2026-54904 — concurrent-ruby: `AtomicReference#update` livelocks when the stored value is `Float::NAN` (CVSS 7.5)