The official source reports this update: v2.53.0 (2026-10-01). 🛡️ Security This release fixes one security issue in ConcurrencyLimitedModel . See the advisory for full details and affected versions. GHSA-6fqq-452j-qhrp (high): a streamed request through ConcurrencyLimitedModel or limit_model_concurrency could keep its concurrency slot when the slot was released on a different task than the one that acquired it: after an early exit (the consumer stopped iterating, raised, or was cancelled), and also after fully consuming stream_text() with its default debouncing. Repeated streams could then block every request sharing the limiter.
Canonical AI event
Security fix in ConcurrencyLimitedModel changes limiter sharing in v2.53.0.
The v2.53.0 release fixes a high-severity security issue in ConcurrencyLimitedModel. The fix changes how limiters are shared and addresses a concurrency slot release problem.
2 Oct 20261 verified claims1 sources1 observations
This official update documents a development concerning v2.53.0 (2026-10-01). Its practical significance depends on the scope and evidence stated by the source.
Read the official source update and verify its stated scope, evidence and timing before acting on it.
Connected knowledge
Entities affected by this event
Continue this topic
Related verified updates
Evidence trail
Sources behind the event
Editorial presentation
Open story