https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:07:19.858639+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-6021 CVE-2023-6021 — Ray Log File Local File Include 2026-10-03T21:07:19.860318+00:00

Affected: ray-project/ray

LFI in Ray's log API endpoint allows attackers to read any file on the server without authentication. The issue is fixed in version 2.8.1+. Ray maintainers' response can be found here: https://www.anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023

 https://cve.radiocsirt.org/vuln/ghsa-3pww-qvr8-6mhp GHSA-3pww-qvr8-6mhp — Ray Path Traversal vulnerability 2026-10-03T21:07:19.860406+00:00

Affected: PyPI: ray

LFI in Ray's log API endpoint allows attackers to read any file on the server without authentication. The issue is fixed in version 2.8.1+. Ray maintainers response can be found here: https://www.anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023