https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:28:05.873283+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-02556 bdu:2024-02556 2026-10-03T04:28:05.935929+00:00 bdu:2024-02556 https://cve.radiocsirt.org/vuln/euvd-2026-7605 EUVD-2026-7605 2026-10-03T04:28:05.935964+00:00 EUVD-2026-7605 https://cve.radiocsirt.org/vuln/fkie_cve-2023-6020 fkie_cve-2023-6020 2026-10-03T04:28:05.935978+00:00

LFI in Ray's /static/ directory allows attackers to read any file on the server without authentication.

 https://cve.radiocsirt.org/vuln/ghsa-6cxr-8q3m-jwrr GHSA-6cxr-8q3m-jwrr — Ray Missing Authorization vulnerability 2026-10-03T04:28:05.936008+00:00

Affected: PyPI: ray

LFI in Ray's /static/ directory allows attackers to read any file on the server without authentication. The issue is fixed in version 2.8.1+. Ray maintainers response can be found here: https://www.anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023

 https://cve.radiocsirt.org/vuln/gsd-2023-6020 gsd-2023-6020 2026-10-03T04:28:05.936033+00:00 gsd-2023-6020 https://cve.radiocsirt.org/vuln/pysec-2026-516 PYSEC-2026-516 — Ray Missing Authorization vulnerability 2026-10-03T04:28:05.936044+00:00

Affected: PyPI: ray

LFI in Ray's /static/ directory allows attackers to read any file on the server without authentication. The issue is fixed in version 2.8.1+. Ray maintainers response can be found here: https://www.anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023