ray Security Advisories - Pypi | Ecosyste.ms: Advisories

ray

Ray provides a simple, universal API for building distributed applications.

View on github.com · View on pypi.org

Security Advisories for ray in pypi

High

about 1 month ago

Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False) GSA_kwCzR0hTQS1oaHJwLWd3MjUtanI0M84ABfqd

pypi ray

High

4 months ago

Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization GSA_kwCzR0hTQS1tdzM1LThyeDMteGY5cs4ABVwy

pypi ray

High

6 months ago

Ray Dashboard is vulnerable to path traversal through its static file handling mechanism GSA_kwCzR0hTQS1qM21oLXFtamoteHA4M84ABTxW

pypi ray

Moderate

7 months ago

Ray dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion) GSA_kwCzR0hTQS1xNWZoLTJoYzgtZjZycc4ABSsV

pypi ray

Critical

9 months ago

Ray's New Token Authentication is Disabled By Default GSA_kwCzR0hTQS1neDc3LXhnYzItNDg4OM4ABPAy

pypi ray

Critical

9 months ago

Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack GSA_kwCzR0hTQS1xMjc5LWpocmYtY2M2ds4ABPAP

pypi ray

Moderate

over 1 year ago

ray vulnerable to Insertion of Sensitive Information into Log File GSA_kwCzR0hTQS13NHJoLWZneDctcTYzbc4ABFJk

pypi ray

Critical

almost 3 years ago

Ray has arbitrary code execution via jobs submission API GSA_kwCzR0hTQS02d2dqLTY2bTIteHhwMs4AA3ZV

pypi ray

Critical

almost 3 years ago

Ray Missing Authorization vulnerability GSA_kwCzR0hTQS02Y3hyLThxM20tandycs4AA3Oe

pypi ray

Critical

almost 3 years ago

Ray Path Traversal vulnerability GSA_kwCzR0hTQS0zcHd3LXF2cjgtNm1ocM4AA3N9

pypi ray

Critical

almost 3 years ago

Ray OS Command Injection vulnerability GSA_kwCzR0hTQS1oM3hnLXd2NTgtNXA0M84AA3OI

pypi ray

Filter by Severity

Critical 6 High 3 Moderate 2