https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:33:52.581757+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-02554 bdu:2024-02554 2026-10-03T22:33:52.684858+00:00 bdu:2024-02554 https://cve.radiocsirt.org/vuln/euvd-2026-204876 EUVD-2026-204876 2026-10-03T22:33:52.684896+00:00 EUVD-2026-204876 https://cve.radiocsirt.org/vuln/fkie_cve-2023-6021 fkie_cve-2023-6021 2026-10-03T22:33:52.684911+00:00

LFI in Ray's log API endpoint allows attackers to read any file on the server without authentication. The issue is fixed in version 2.8.1+. Ray maintainers' response can be found here: https://www.anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023

 https://cve.radiocsirt.org/vuln/ghsa-3pww-qvr8-6mhp GHSA-3pww-qvr8-6mhp — Ray Path Traversal vulnerability 2026-10-03T22:33:52.684944+00:00

Affected: PyPI: ray

LFI in Ray's log API endpoint allows attackers to read any file on the server without authentication. The issue is fixed in version 2.8.1+. Ray maintainers response can be found here: https://www.anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023

 https://cve.radiocsirt.org/vuln/gsd-2023-6021 gsd-2023-6021 2026-10-03T22:33:52.684969+00:00 gsd-2023-6021 https://cve.radiocsirt.org/vuln/pysec-2026-515 PYSEC-2026-515 — Ray Path Traversal vulnerability 2026-10-03T22:33:52.684981+00:00

Affected: PyPI: ray

LFI in Ray's log API endpoint allows attackers to read any file on the server without authentication. The issue is fixed in version 2.8.1+. Ray maintainers response can be found here: https://www.anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023