PyPIPackage

ray

10 known vulnerabilities (3 critical, 5 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release: 2.60.0 (Nov 4, 2026): no advisory with comparable ranges affects it; 1 advisory (CVE-2025-1979) can't be checked against versions
Newest unaffected release: 2.60.0 (Nov 4, 2026), the latest release, not counting 1 advisory without comparable ranges
Advisories: 10 · 3 critical, 5 high, 2 medium

Weekly downloads: 3.7M
Dependents: 642
Releases: 137 since 0.1.1
Registry: PyPI
Releases read: Nov 8, 2026

Version timeline

CVE-2026-57516
Affects 0.1.1 to 2.55.1 (2.56.0 is outside it)
CVE-2026-41486
Affects 0.1.1 to 2.54.1 (2.55.0 is outside it)
CVE-2026-32981
Affects 0.1.1 to 2.8.0 (2.8.1 is outside it)
CVE-2026-27482
Affects 0.1.1 to 2.53.0 (2.54.0 is outside it)
CVE-2025-62593
Affects 0.1.1 to 2.51.2 (2.52.0 is outside it)
CVE-2025-1979
Its ranges can't be placed on these versions
Its ranges can't be placed on these versions
CVE-2023-48022
Affects 0.1.1 to 2.49.2 (2.50.0 is outside it)
CVE-2023-6020
Affects 0.1.1 to 2.8.0 (2.8.1 is outside it)
CVE-2023-6019
Affects 0.1.1 to 2.8.0 (2.8.1 is outside it)
CVE-2023-6021
Affects 0.1.1 to 2.8.0 (2.8.1 is outside it)

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 10

CVE-2026-57516High 8.6
Ray < 2.56.0 Unsafe Deserialization RCE via WebDataset Reader
Affected: fixed in 2.56.0.
Fixed in 2.56.0 (released Jun 29, 2026, 2 days before disclosure).
The latest release, 2.60.0, is not affected.
CVE-2026-41486High 8.9
Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization
Affected: through 2.54.0; from 2.49.0, fixed in 2.55.0.
Fixed in 2.55.0 (released Apr 15, 2026, 23 days before disclosure).
The latest release, 2.60.0, is not affected.
CVE-2026-32981High 8.7
Ray Dashboard <= 2.8.0 Path Traversal Leading to Local File Disclosure
Affected: fixed in 2.8.1.
Fixed in 2.8.1 (released Dec 1, 2023, 837 days before disclosure).
The latest release, 2.60.0, is not affected.
CVE-2026-27482Medium 5.9
Ray: Dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)
Affected: fixed in 2.54.0.
Fixed in 2.54.0 (released Feb 18, 2026, 3 days before disclosure).
The latest release, 2.60.0, is not affected.
CVE-2025-62593Critical 9.4 · KEV
Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack
Affected: fixed in 2.52.0.
Fixed in 2.52.0 (released Nov 21, 2025, 5 days before disclosure).
The latest release, 2.60.0, is not affected.
CVE-2025-1979Medium 5.7
Versions of the package ray before 2.43.0 are vulnerable to Insertion of Sensitive Information into Log File where the redis password is…
Affected: fixed in 2.43.0; fixed in 2.43.0.
CVE-2023-48022Critical 9.8
Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API.
Affected: through 2.49.2.
Fixed in 2.50.0 (released Oct 10, 2025, 682 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 2.60.0, is not affected.
CVE-2023-6020High 7.5
Ray Static File Local File Include
Affected: fixed in 2.8.1.
Fixed in 2.8.1 (released Dec 1, 2023, 15 days after disclosure).
The latest release, 2.60.0, is not affected.
CVE-2023-6019Critical 9.8
Ray Command Injection in cpu_profile Parameter
Affected: fixed in 2.8.1.
Fixed in 2.8.1 (released Dec 1, 2023, 15 days after disclosure).
The latest release, 2.60.0, is not affected.
CVE-2023-6021High 7.5
Ray Log File Local File Include
Affected: fixed in 2.8.1.
Fixed in 2.8.1 (released Dec 1, 2023, 15 days after disclosure).
The latest release, 2.60.0, is not affected.