VYPR

Concurrent Ruby

by Rubyconcurrency

Source repositories

CVEs (3)

  • CVE-2026-54906CriJun 24, 2026
    risk 0.57cvss 9.8epss 0.00

    concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReadWriteLock#release_write_lock does not verify that the calling thread acquired the write lock. Any thread with access to the lock object can release an active write lock held by another…

  • CVE-2026-54904HigJun 24, 2026
    risk 0.42cvss 7.5epss 0.01

    concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::AtomicReference#update can enter a permanent busy retry loop when the current value is Float::NAN. The issue is caused by the interaction between AtomicReference#update, which retries until…

  • CVE-2026-54905MedJun 24, 2026
    risk 0.29cvss 5.5epss 0.00

    concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReentrantReadWriteLock can incorrectly grant a write lock after one thread acquires the read lock 32,768 times. The lock stores a thread's local read and write hold counts in one integer. The low…