https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:05:42.630046+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-48022 CVE-2023-48022 2026-10-02T22:05:42.655232+00:00

Affected: anyscale ray

Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment. (Also, within that environment, customers at version 2.52.0 and later can choose to use token authentication.)

 https://cve.radiocsirt.org/vuln/ghsa-6wgj-66m2-xxp2 GHSA-6wgj-66m2-xxp2 — Ray has arbitrary code execution via jobs submission API 2026-10-02T22:05:42.655300+00:00

Affected: PyPI: ray

Anyscale Ray allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment.