Skip to content
OpenAdvisories

Product · ruby-concurrency

concurrent-ruby

3 known vulnerabilities.

2 results · Clear filters · Feed

  • Low 2.1

    concurrent-ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption

    concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReadWriteLock#release_write_lock does not verify that the calling thread acquired the write lock. Any thread with access to the lock object can release an active write lock he…

  • Low 2.0

    concurrent-ruby: `ReentrantReadWriteLock` read-count overflow grants a write lock without exclusivity

    concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReentrantReadWriteLock can incorrectly grant a write lock after one thread acquires the read lock 32,768 times. The lock stores a thread's local read and write hold counts in …