ray vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-41486Highray: Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization CVE-2026-32981Highray: Ray Dashboard is vulnerable to path traversal through its static file handling mechanism CVE-2026-27482Mediumray: Ray dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)CVE-2025-34351Criticalray: Ray's New Token Authentication is Disabled By Default CVE-2025-62593Criticalray: Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack CVE-2025-1979Mediumray: ray vulnerable to Insertion of Sensitive Information into Log File CVE-2023-48022Criticalray: Ray has arbitrary code execution via jobs submission API CVE-2023-6020Criticalray: Ray Missing Authorization vulnerability CVE-2023-6019Criticalray: Ray OS Command Injection vulnerability CVE-2023-6021Criticalray: Ray Path Traversal vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo