StackRadar

CVE-2026-54906

Low

Advisory

Published 19 Jun 2026In the index since 6 Sept 2026
Severity
Low
worst across findings
CVSS
2.1
base score, highest
EPSS
0.003
17th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
52
of 17,781 indexed, latest versions
Container images
54
deployed by those charts
Fix available
1 of 1
affected package

Concurrent Ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption

Carried by container images the latest versions of 52 of 17,781 indexed charts deploy, on 54 images.

Affected packageAffected versionsFixed inImages
concurrent-rubygem1.0.5, 1.1.3, 1.1.4, 1.1.5+10 more1.3.754
OSV records
GHSA-6wx8-w4f5-wwcr

Charts affected

52 by stars
ChartLatestAffected imagesRadar Score
velero-notificationsvelero-notifications1.1.01 of 1See more

velero-notifications velero-notifications 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-54906.

Container imageDigestPackageFixed in
ghcr.io/simoncaron/velero-notifications:1.0.0d058963d4de7
concurrent-ruby@1.1.10
1.3.7

Open the chart page →

1,285
maybe-financevicsuferVerified publisher0.2.71 of 3See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2026-54906.

Container imageDigestPackageFixed in
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
concurrent-ruby@1.3.5
1.3.7

Open the chart page →

10,795

Container images carrying it

54 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
coralogixrepo/fluentd-coralogix-image:1.1.6b976e0412424
concurrent-ruby@1.1.5
1.3.7
4
chatwoot/chatwoot:v3.1.0d530ab8c1753
concurrent-ruby@1.2.2
1.3.7
2
pecan/bety:5.4.1f825d480cd62
concurrent-ruby@1.1.9
1.3.7
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
concurrent-ruby@1.1.10
1.3.7
2
binford2k/showoff:0.20.2a64937052ce7
concurrent-ruby@1.1.6
1.3.7
1
bryanalves/honeywell_exporter:0.0.1195f73dce8b21
concurrent-ruby@1.0.5
1.3.7
1
chatwoot/chatwoot:v4.15.167ebc751c171
concurrent-ruby@1.3.5
1.3.7
1
docuseal/docuseal:2.4.17493fd7f6728
concurrent-ruby@1.3.6
1.3.7
1
fluent/fluentd-kubernetes-daemonset:v1.11.5-debian-forward-1.00717111a3362
concurrent-ruby@1.1.7
1.3.7
1
fluent/fluentd-kubernetes-daemonset:v1.3.3-debian-cloudwatch-1.017398121d3cc
concurrent-ruby@1.1.4
1.3.7
1
fluent/fluentd-kubernetes-daemonset:v1.10.3-debian-cloudwatch-1.019a8f0662241
concurrent-ruby@1.1.6
1.3.7
1
fluent/fluentd-kubernetes-daemonset:v1.14.0-debian-elasticsearch7-1.03933cae61054
concurrent-ruby@1.1.9
1.3.7
1
fluent/fluentd-kubernetes-daemonset:v1.12.4-debian-elasticsearch7-1.0656423b5fabb
concurrent-ruby@1.1.8
1.3.7
1
fluent/fluentd-kubernetes-daemonset:papertrail9c209835eea1
concurrent-ruby@1.1.3
1.3.7
1
fluent/fluentd-kubernetes-daemonset:v1.4.2-debian-elasticsearch-1.1ce4885865850
concurrent-ruby@1.1.5
1.3.7
1
gollumorg/gollum:latest7cd5305a3cf7
concurrent-ruby@1.1.7
1.3.7
1
grafana/fluent-plugin-loki:latest8a3882e8c28b
concurrent-ruby@1.3.5
1.3.7
1
hickey/puppet_forge:1.10.0c1148a09ef20
concurrent-ruby@1.0.5
1.3.7
1
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
concurrent-ruby@1.1.6
1.3.7
1
klausmeyer/docker-registry-browser:1.3.5430a440d95af
concurrent-ruby@1.1.7
1.3.7
1
klausmeyer/docker-registry-browser:1.4.0bdc4c6b8595b
concurrent-ruby@1.1.9
1.3.7
1
library/logstash:7.17.817a4f64e9cf5
concurrent-ruby@1.1.9
1.3.7
1
library/logstash:9.1.233eae14f0867
concurrent-ruby@1.1.9
1.3.7
1
library/redmine:6.1.204ac44a2595b
concurrent-ruby@1.3.6
1.3.7
1
logicmonitor/lm-logs-k8s-fluentd:1.0.55ac21b3f1572
concurrent-ruby@1.2.2
1.3.7
1
mirrorgitlabcontainers/gitaly:v13.2.283599461ef8b
concurrent-ruby@1.1.6
1.3.7
1
mirrorgitlabcontainers/gitlab-sidekiq-ce:v13.2.294d1431683fa
concurrent-ruby@1.1.6
1.3.7
1
mirrorgitlabcontainers/gitlab-task-runner-ce:v13.2.29efd73993c34
concurrent-ruby@1.1.6
1.3.7
1
mirrorgitlabcontainers/gitlab-webservice-ce:v13.2.230393f990f5c
concurrent-ruby@1.1.6
1.3.7
1
octoboxio/octobox:latestd909041c46eb
concurrent-ruby@1.3.6
1.3.7
1
openproject/community:12.0.2734743d11094
concurrent-ruby@1.1.9
1.3.7
1
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
concurrent-ruby@1.1.9
1.3.7
1
pactfoundation/pact-broker:2.32.0-2062d6c710099
concurrent-ruby@1.1.5
1.3.7
1
pactfoundation/pact-broker:2.79.1.112861b0bd4d9
concurrent-ruby@1.1.8
1.3.7
1
pactfoundation/pact-broker:2.101.0.0a3021fc42834
concurrent-ruby@1.1.10
1.3.7
1
puppet/puppet-agent:7.14.00b6fd9a6b7da
concurrent-ruby@1.1.9
1.3.7
1
uffizzi/app:latest66e9e3937c60
concurrent-ruby@1.1.9
1.3.7
1
vmware/kube-fluentd-operator:latestf028c138a5f4
concurrent-ruby@1.2.3
1.3.7
1
zammad/zammad-docker-compose:zammad-4.1.0-312808e2dfa810
concurrent-ruby@1.1.8
1.3.7
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
concurrent-ruby@1.3.5
1.3.7
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
concurrent-ruby@1.1.6
1.3.7
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
concurrent-ruby@1.1.6
1.3.7
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
concurrent-ruby@1.1.6
1.3.7
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
concurrent-ruby@1.1.6
1.3.7
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
concurrent-ruby@1.1.6
1.3.7
1
ghcr.io/manyfold3d/manyfold:0.136.0d14ca4d82475
concurrent-ruby@1.3.6
1.3.7
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
concurrent-ruby@1.2.0
1.3.7
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
concurrent-ruby@1.3.5
1.3.7
1
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
concurrent-ruby@1.2.0
1.3.7
1
ghcr.io/simoncaron/velero-notifications:1.0.0d058963d4de7
concurrent-ruby@1.1.10
1.3.7
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.