3 known security vulnerabilities
- highGHSA-h8w8-99g7-qmvj(CVE-2026-54904)
Concurrent Ruby : `AtomicReference#update` livelocks when the stored value is `Float::NAN`
Show 2 more vulnerabilitiesShow fewer vulnerabilities2 low
- lowGHSA-6wx8-w4f5-wwcr(CVE-2026-54906)
Concurrent Ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption
- lowGHSA-wv3x-4vxv-whpp(CVE-2026-54905)
Concurrent Ruby: `ReentrantReadWriteLock` read-count overflow grants a write lock without exclusivity
This version has been yanked, and it is not available for download directly or for other gems that may have depended on it.
Versions
-
1.3.8
-
source
- 1.3.8 source July 19, 2026 (343 KB)
-
-
1.3.7
-
source
- 1.3.7 source June 16, 2026 (342 KB)
-
-
1.3.6
-
source
- 1.3.6 source December 13, 2025 (343 KB) vulnerable
-
-
1.3.5
-
source
- 1.3.5 source January 15, 2025 (342 KB) vulnerable
-
-
1.3.4
-
source
- 1.3.4 source August 10, 2024 (342 KB) vulnerable
-
-
0.7.0.pre.1
-
source
- 0.7.0.pre.1 source June 13, 2014 (79 KB) yanked vulnerable
-