3 known security vulnerabilities
- highGHSA-h8w8-99g7-qmvj(CVE-2026-54904)
Concurrent Ruby : `AtomicReference#update` livelocks when the stored value is `Float::NAN`
Show 2 more vulnerabilitiesShow fewer vulnerabilities2 low
- lowGHSA-6wx8-w4f5-wwcr(CVE-2026-54906)
Concurrent Ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption
- lowGHSA-wv3x-4vxv-whpp(CVE-2026-54905)
Concurrent Ruby: `ReentrantReadWriteLock` read-count overflow grants a write lock without exclusivity
Modern concurrency tools including agents, futures, promises, thread pools, actors, supervisors, and more. Inspired by Erlang, Clojure, Go, JavaScript, actors, and classic concurrency patterns.
Required Ruby Version
>= 1.9.3
Required Rubygems Version
> 1.3.1
Authors
Jerry D'Antonio, The Ruby Concurrency Team
Versions
-
1.3.8
-
source
- 1.3.8 source July 19, 2026 (343 KB)
-
-
1.3.7
-
source
- 1.3.7 source June 16, 2026 (342 KB)
-
-
1.3.6
-
source
- 1.3.6 source December 13, 2025 (343 KB) vulnerable
-
-
1.3.5
-
source
- 1.3.5 source January 15, 2025 (342 KB) vulnerable
-
-
1.3.4
-
source
- 1.3.4 source August 10, 2024 (342 KB) vulnerable
-
-
1.0.0.pre1
-
source
- 1.0.0.pre1 source August 19, 2015 (115 KB) vulnerable
-
java
- 1.0.0.pre1 multi-abi August 19, 2015 (218 KB) vulnerable
-