- Update
concurrent-rubyto1.3.7to address CVE-2026-54906 (ReadWriteLock unauthorized lock release, CRITICAL) and CVE-2026-54904 (AtomicReference#update infinite loop, HIGH). - Update
faradayto2.14.3to address CVE-2026-54297 (NestedParamsEncoder unbounded recursion DoS, HIGH).