CRITICALPyPI
GHSA-gx77-xgc2-4888· CVE-2025-34351, PYSEC-2026-518Ray's New Token Authentication is Disabled By Default
Modified: 9/10/2026
package
PyPI/ray
pkg:pypi/ray
CRITICAL9.8PyPI
GHSA-h3xg-wv58-5p43· CVE-2023-6019, PYSEC-2026-519Ray OS Command Injection vulnerability
Modified: 9/10/2026
HIGH8.8PyPI
GHSA-hhrp-gw25-jr43· CVE-2026-57516, PYSEC-2026-2273Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False)
Modified: 9/10/2026
CRITICAL9.3PyPI
GHSA-3pww-qvr8-6mhp· CVE-2023-6021, PYSEC-2026-515Ray Path Traversal vulnerability
Modified: 9/10/2026
CRITICAL9.3PyPI
GHSA-6cxr-8q3m-jwrr· CVE-2023-6020, PYSEC-2026-516Ray Missing Authorization vulnerability
Modified: 9/10/2026
CRITICAL9.8PyPI
GHSA-6wgj-66m2-xxp2· CVE-2023-48022, PYSEC-2026-517Ray has arbitrary code execution via jobs submission API
Modified: 9/10/2026
HIGH7.5PyPI
GHSA-j3mh-qmjj-xp83· CVE-2026-32981, PYSEC-2026-130Ray Dashboard is vulnerable to path traversal through its static file handling mechanism
Modified: 6/9/2026
HIGHPyPI
GHSA-mw35-8rx3-xf9r· CVE-2026-41486, PYSEC-2026-2272Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization
Modified: 9/10/2026
CRITICALPyPI
GHSA-q279-jhrf-cc6v· CVE-2025-62593, PYSEC-2026-520Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack
Modified: 9/10/2026
MEDIUM5.9PyPI
GHSA-q5fh-2hc8-f6rq· CVE-2026-27482, PYSEC-2026-2271Ray dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)
Modified: 9/10/2026
MEDIUM6.4PyPI
GHSA-w4rh-fgx7-q63m· CVE-2025-1979, PYSEC-2025-23ray vulnerable to Insertion of Sensitive Information into Log File
Modified: 9/10/2026
MEDIUM6.5PyPI
PYSEC-2026-2271· CVE-2026-27482, GHSA-q5fh-2hc8-f6rqModified: 7/13/2026
HIGH8.8PyPI
PYSEC-2026-2272· CVE-2026-41486, GHSA-mw35-8rx3-xf9rModified: 7/13/2026
—PyPI
PYSEC-2026-2273· CVE-2026-57516, GHSA-hhrp-gw25-jr43Modified: 7/13/2026
—PyPI
PYSEC-2025-23· CVE-2025-1979, GHSA-w4rh-fgx7-q63mModified: 6/10/2026
HIGH7.5PyPI
PYSEC-2026-130· CVE-2026-32981, GHSA-j3mh-qmjj-xp83Modified: 6/10/2026
CRITICAL9.3PyPI
PYSEC-2026-515· CVE-2023-6021, GHSA-3pww-qvr8-6mhpRay Path Traversal vulnerability
Modified: 7/1/2026
CRITICAL9.3PyPI
PYSEC-2026-516· CVE-2023-6020, GHSA-6cxr-8q3m-jwrrRay Missing Authorization vulnerability
Modified: 7/1/2026
CRITICAL9.8PyPI
PYSEC-2026-517· CVE-2023-48022, GHSA-6wgj-66m2-xxp2Ray has arbitrary code execution via jobs submission API
Modified: 7/1/2026
—PyPI
PYSEC-2026-518· CVE-2025-34351, GHSA-gx77-xgc2-4888Ray's New Token Authentication is Disabled By Default
Modified: 7/1/2026
CRITICAL9.8PyPI
PYSEC-2026-519· CVE-2023-6019, GHSA-h3xg-wv58-5p43Ray OS Command Injection vulnerability
Modified: 7/1/2026
—PyPI
PYSEC-2026-520· CVE-2025-62593, GHSA-q279-jhrf-cc6vRay is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack
Modified: 7/1/2026