CVE-2026-54905 | ruby-concurrency concurrent-ruby up to 1.3.6 ReentrantReadWriteLock wrap-around

A vulnerability identified as problematic has been detected in ruby-concurrency concurrent-ruby up to 1.3.6. The affected element is the function Concurrent::ReentrantReadWriteLock. This manipulation causes wrap-around error.

This vulnerability is handled as CVE-2026-54905. It is possible to launch the attack on the local host. There is not any exploit available.

You should upgrade the affected component.