Security Bulletin: IBM Maximo Application Suite Ai-Broker Component vulnerable to vulnerable to Insertion of Sensitive Information into Log File where the redis password is being logged in the standard logging.

Summary Security Bulletin: IBM Maximo Application Suite Ai-Broker Component vulnerable to vulnerable to Insertion of Sensitive Information into Log File where the redis password is being logged in the standard logging. This bulletin contains information regarding the vulnerability and its fixture...

modin (>=0.1.0, <=0.1.1) potentially affected by CVE-2025-1979 via ray (0.5.0)

ray PYPI version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - modin =0.1.0, =0.1.1 Source cves: CVE-2025-1979 Source advisory: OSV:GHSA-W4RH-FGX7-Q63M...

mlsquare (0.2.1) potentially affected by CVE-2025-1979 via ray (0.6.5)

ray PYPI version 0.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - mlsquare 0.2.1 Source cves: CVE-2025-1979 Source advisory: OSV:GHSA-W4RH-FGX7-Q63M...

auto-augment (1.0.0), bio-pyminer (>=0.9.13, <=0.10.0) +3 more potentially affected by CVE-2025-1979 via ray (0.8.4)

ray PYPI version 0.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - auto-augment 1.0.0 - bio-pyminer =0.9.13, =0.0.0, =0.4.7, =0.4.9 Source cves: CVE-2025-1979 Source advisory: OSV:GHSA-W4RH-FGX7-Q63M...

biome-text (3.3.0), discern-reconstruction (>=0.1.0, <=0.1.1) +5 more potentially affected by CVE-2025-1979 via ray (1.6.0)

ray PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - biome-text 3.3.0 - discern-reconstruction =0.1.0, =0.1.7, =0.0.3.dev0, =0.2.4, =1.3.0, =2.2.10 - raylab 0.16.1 Source cves: CVE-2025-1979 Source advisory:...

autogluon (>=0.3.2b20220126, <=0.4.1b20220317), gen2-connector (>=1.0.0b48, <=1.0.0b56) +2 more potentially affected by CVE-2025-1979 via ray (1.8.0)

ray PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.3.2b20220126, =1.0.0b48, =0.0.7.post1, =0.1.0b0, =0.1.3 Source cves: CVE-2025-1979 Source advisory: OSV:GHSA-W4RH-FGX7-Q63M...

pydgn (>=0.5.0, <=1.2.6), raylab (0.16.0) potentially affected by CVE-2025-1979 via ray (1.5.2)

ray PYPI version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - pydgn =0.5.0, =1.2.6 - raylab 0.16.0 Source cves: CVE-2025-1979 Source advisory: OSV:GHSA-W4RH-FGX7-Q63M...

hydra-ray-launcher (1.2.0), ray-on-aml (>=0.1.8, <=0.2.1) +1 more potentially affected by CVE-2025-1979 via ray (1.12.0)

ray PYPI version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - hydra-ray-launcher 1.2.0 - ray-on-aml =0.1.8, =0.2.1 - txp 0.2.17 Source cves: CVE-2025-1979 Source advisory: OSV:GHSA-W4RH-FGX7-Q63M...

actorch (>=0.0.3, <=0.0.5), aliby (>=0.1.18, <=0.1.55) +38 more potentially affected by CVE-2025-1979 via ray (1.13.0)

ray PYPI version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - actorch =0.0.3, =0.1.18, =0.1.11, =0.1.3, =0.4.3b20220618, =0.4.3b20220618, =0.4.3b20220618, =0.0.14, =11.1.0, =0.1.0, =0.2.0, =0.0.1, =0.0.9, =0.1.3 and...

deephyper (>=0.1.1, <=0.1.2) potentially affected by CVE-2025-1979 via ray (0.7.2)

ray PYPI version 0.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - deephyper =0.1.1, =0.1.2 Source cves: CVE-2025-1979 Source advisory: OSV:GHSA-W4RH-FGX7-Q63M...

modin (0.1.2) potentially affected by CVE-2025-1979 via ray (0.5.2)

ray PYPI version 0.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - modin 0.1.2 Source cves: CVE-2025-1979 Source advisory: OSV:GHSA-W4RH-FGX7-Q63M...

flambe (>=0.4.11, <=0.4.13) potentially affected by CVE-2025-1979 via ray (0.7.6)

ray PYPI version 0.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - flambe =0.4.11, =0.4.13 Source cves: CVE-2025-1979 Source advisory: OSV:GHSA-W4RH-FGX7-Q63M...

farm-haystack (>=0.10.0, <=1.0.0), kserve (>=0.7.0rc0, <=0.7.0) potentially affected by CVE-2025-1979 via ray (1.5.0)

ray PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - farm-haystack =0.10.0, =0.7.0rc0, =0.7.0 Source cves: CVE-2025-1979 Source advisory: OSV:GHSA-W4RH-FGX7-Q63M...

abmarl (>=0.2.3, <=0.2.4), autogluon (>=0.4.3b20220611, <=0.4.3b20220617) +4 more potentially affected by CVE-2025-1979 via ray (1.12.1)

ray PYPI version 1.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - abmarl =0.2.3, =0.4.3b20220611, =3.1.1, =2022.7.7.dev1, =1.2.0, =1.2.1 Source cves: CVE-2025-1979 Source advisory: OSV:GHSA-W4RH-FGX7-Q63M...

aisfx (0.0.0) potentially affected by CVE-2025-1979 via ray (1.7.0)

ray PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - aisfx 0.0.0 Source cves: CVE-2025-1979 Source advisory: OSV:GHSA-W4RH-FGX7-Q63M...

autogluon (>=0.3.2b20211214, <=0.3.2b20220125), msapy (>=0.0.1, <=1.0.0) potentially affected by CVE-2025-1979 via ray (1.7.1)

ray PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.3.2b20211214, =0.0.1, =1.0.0 Source cves: CVE-2025-1979 Source advisory: OSV:GHSA-W4RH-FGX7-Q63M...

ablator (>=0.0.1b1, <=0.0.1b3), ablator-ken-test (0.0.1b2) +158 more potentially affected by CVE-2025-1979 via ray (>=2.0.0, <=2.42.1)

ray PYPI version =2.0.0, =0.0.1b1, =0.0.1, =0.2.2, =1.1.1, =0.20.5.dev13, =0.20.5.dev13, =0.10.0, =0.3.6, =0.1.11, =0.1.17 - autobiasdetector 0.0.2 - autogenesis 0.0.1 and more Source cves: CVE-2025-1979 Source advisory: OSV:GHSA-W4RH-FGX7-Q63M...

gym-jiminy-rllib (1.6.27), gym-recorder (>=0.0.2, <=0.0.3) +5 more potentially affected by CVE-2025-1979 via ray (1.4.1)

ray PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - gym-jiminy-rllib 1.6.27 - gym-recorder =0.0.2, =1.6.3, =2.1.41, =2021.7.21.dev0, =2021.7.30.dev0 - raylab 0.15.10 Source cves: CVE-2025-1979 Source...

encdecmeta (0.0.3), nevopy (>=0.0.1, <=0.2.3) potentially affected by CVE-2025-1979 via ray (1.1.0)

ray PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - encdecmeta 0.0.3 - nevopy =0.0.1, =0.2.3 Source cves: CVE-2025-1979 Source advisory: OSV:GHSA-W4RH-FGX7-Q63M...

opensoundscape (>=0.4.0, <=0.5.0), pdf2dataset (>=0.4.0, <=0.5.3) +3 more potentially affected by CVE-2025-1979 via ray (0.8.7)

ray PYPI version 0.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - opensoundscape =0.4.0, =0.4.0, =0.8.3, =0.1.0, =0.0.0, =0.1.4 Source cves: CVE-2025-1979 Source advisory: OSV:GHSA-W4RH-FGX7-Q63M...