Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: anyscale Clear
ID Title
CVE-2025-62593 KEV [KEV] Cross-Site Request Forgery (CSRF) in Ray-project ray (CVE-2025-62593)
vulnerability in Ray-project ray (CVE-2025-62593). Successful exploitation can lead to full system takeover. Exploitable via ``fetch``. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `2.52.0` or later.
CVE-2026-57516 Code Injection in ray (CVE-2026-57516)
code injection in ray (CVE-2026-57516). Successful exploitation can lead to full system takeover. Exploitable via ``_default_decoder``. Mitigation: upgrade to `2.55.0` or later.
CVE-2026-41486 Code Injection in ray (CVE-2026-41486)
code injection in ray (CVE-2026-41486). Successful exploitation can lead to full system takeover. Exploitable via ``ray.data.arrow_tensor``. Mitigation: upgrade to `2.55.0` or later.
CVE-2026-32981 Path Traversal in ray (CVE-2026-32981)
path traversal in ray (CVE-2026-32981). Confidential information can be exposed externally. Mitigation: upgrade to `2.8.1` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →