ray vulnerabilities (PyPI)
11 vulnerabilities.
-
rayPyPI Ray < 2.56.0 Unsafe Deserialization RCE via WebDataset Reader 8.6 High -
rayPyPI Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization 8.9 High -
rayPyPI Ray Dashboard <= 2.8.0 Path Traversal Leading to Local File Disclosure 8.7 High -
rayPyPI Ray: Dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion) 5.9 Medium -
rayPyPI Ray's New Token Authentication is Disabled By Default 9.3 Critical -
rayPyPI Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack 9.4 Critical -
rayPyPI ray vulnerable to Insertion of Sensitive Information into Log File 5.7 Medium -
rayPyPI Ray has arbitrary code execution via jobs submission API 9.8 Critical -
rayPyPI Ray Static File Local File Include 7.5 High -
rayPyPI Ray Command Injection in cpu_profile Parameter 9.8 Critical -
rayPyPI Ray Log File Local File Include 7.5 High