Vulnerabilities

TI-2026-39678 CVE-2026-54906 · GHSA-6wx8-w4f5-wwcr

concurrent-ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption

MEDIUM 44

concurrent-ruby is a modern concurrency tools for Ruby.

CVSS 4.0LOW 2.1 Local No auth No interaction EPSS 0.0016 Published 2026-06-24 Fixed in 1.3.7 CWE-414

TI-2026-39676 CVE-2026-54904 · GHSA-h8w8-99g7-qmvj

HIGH 69

concurrent-ruby is a modern concurrency tools for Ruby.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00673 Published 2026-06-24 Fixed in 1.3.7 CWE-835

TI-2026-39677 CVE-2026-54905 · GHSA-wv3x-4vxv-whpp

MEDIUM 44

concurrent-ruby is a modern concurrency tools for Ruby.

CVSS 4.0LOW 2.0 Local Low privileges No interaction EPSS 0.00153 Published 2026-06-24 Partial fix · 1.3.7 CWE-128