deephyper (>=0.1.1, <=0.1.2) potentially affected by CVE-2025-34351 via ray (0.7.2)

ray PYPI version 0.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - deephyper =0.1.1, =0.1.2 Source cves: CVE-2025-34351 Source advisory: OSV:PYSEC-2026-518...

smarts (>=0.4.2, <=0.4.6.post0), ultra-rl (>=0.1.0, <=0.1.1) potentially affected by CVE-2025-34351 via ray (0.8.3)

ray PYPI version 0.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - smarts =0.4.2, =0.1.0, =0.1.1 Source cves: CVE-2025-34351 Source advisory: OSV:PYSEC-2026-518...

biome-text (>=3.0.0, <=3.2.1), deepcomp (>=1.2.4, <=1.2.5) +7 more potentially affected by CVE-2025-34351 via ray (1.3.0)

ray PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - biome-text =3.0.0, =1.2.4, =0.4.2rc0, =0.0.7, =0.2.0, =2021.6.12.dev0, =2021.6.17.dev0 Source cves: CVE-2025-34351 Source advisory: OSV:PYSEC-2026-518...

farm-haystack (>=0.10.0, <=1.0.0), kserve (>=0.7.0rc0, <=0.7.0) potentially affected by CVE-2025-34351 via ray (1.5.0)

ray PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - farm-haystack =0.10.0, =0.7.0rc0, =0.7.0 Source cves: CVE-2025-34351 Source advisory: OSV:PYSEC-2026-518...

deepnlpf (>=0.0.18, <=0.0.20) potentially affected by CVE-2025-34351 via ray (1.11.0)

ray PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - deepnlpf =0.0.18, =0.0.20 Source cves: CVE-2025-34351 Source advisory: OSV:PYSEC-2026-518...

gen2-connector (1.0.0b60), pynb-dag-runner (>=0.0.6, <=0.0.9) +2 more potentially affected by CVE-2025-34351 via ray (1.9.1)

ray PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - gen2-connector 1.0.0b60 - pynb-dag-runner =0.0.6, =0.0.4.dev1661688916, =0.0.4, =0.0.6 Source cves: CVE-2025-34351 Source advisory: OSV:PYSEC-2026-518...

actorch (>=0.0.3, <=0.0.5), aliby (>=0.1.18, <=0.1.55) +38 more potentially affected by CVE-2025-34351 via ray (1.13.0)

ray PYPI version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - actorch =0.0.3, =0.1.18, =0.1.11, =0.1.3, =0.4.3b20220618, =0.4.3b20220618, =0.4.3b20220618, =0.0.14, =11.1.0, =0.1.0, =0.2.0, =0.0.1, =0.0.9, =0.1.3 and...

abmarl (>=0.2.3, <=0.2.4), autogluon (>=0.4.3b20220611, <=0.4.3b20220617) +4 more potentially affected by CVE-2025-34351 via ray (1.12.1)

ray PYPI version 1.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - abmarl =0.2.3, =0.4.3b20220611, =3.1.1, =2022.7.7.dev1, =1.2.0, =1.2.1 Source cves: CVE-2025-34351 Source advisory: OSV:PYSEC-2026-518...

encdecmeta (0.0.3), nevopy (>=0.0.1, <=0.2.3) potentially affected by CVE-2025-34351 via ray (1.1.0)

ray PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - encdecmeta 0.0.3 - nevopy =0.0.1, =0.2.3 Source cves: CVE-2025-34351 Source advisory: OSV:PYSEC-2026-518...

autogluon (>=0.4.1b20220318, <=0.4.3), autotst (>=1.0.0, <=1.2.0) +7 more potentially affected by CVE-2025-34351 via ray (1.10.0)

ray PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.4.1b20220318, =1.0.0, =0.0.1, =0.0.0, =0.1.0, =1.7.8, =0.1.5, =0.1.6 Source cves: CVE-2025-34351 Source advisory: OSV:PYSEC-2026-518...

abmarl (>=0.2.0, <=0.2.2), aliby (0.1.16) +5 more potentially affected by CVE-2025-34351 via ray (1.4.0)

ray PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - abmarl =0.2.0, =0.1.4, =1.3.0, =1.4.10, =2021.6.22.dev0, =2021.7.1.dev0 Source cves: CVE-2025-34351 Source advisory: OSV:PYSEC-2026-518...

opensoundscape (>=0.4.0, <=0.5.0), pdf2dataset (>=0.4.0, <=0.5.3) +3 more potentially affected by CVE-2025-34351 via ray (0.8.7)

ray PYPI version 0.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - opensoundscape =0.4.0, =0.4.0, =0.8.3, =0.1.0, =0.0.0, =0.1.4 Source cves: CVE-2025-34351 Source advisory: OSV:PYSEC-2026-518...

CVE-2025-34351

creationtimestamp| type| source ---|---|--- 2025-11-27 04:32:56+00:00| seen| https://infosec.exchange/users/offseq/statuses/115619789202134613 2025-11-27 04:32:59+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m6lk2x6rq52g 2025-11-27 05:23:45+00:00| seen|...

aana (>=0.2.1, <=0.2.4), ablator (>=0.0.1b1, <=0.0.1b3) +418 more potentially affected by CVE-2025-34351 via ray (>=2.0.0, <=2.51.1)

ray PYPI version =2.0.0, =0.2.1, =0.0.1b1, =0.2.0, =1.0.4, =1.3.0, =1.0.1, =1.0.3, =2.0.3, =2.0.3, =1.6.0, =1.4.0, =1.15.4 and more Source cves: CVE-2025-34351 Source advisory: GHSA-GX77-XGC2-4888...

abmarl (>=0.2.3, <=0.2.4), autogluon (>=0.4.3b20220611, <=0.4.3b20220617) +4 more potentially affected by CVE-2025-34351 via ray (1.12.1)

ray PYPI version 1.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - abmarl =0.2.3, =0.4.3b20220611, =3.1.1, =2022.7.7.dev1, =1.2.0, =1.2.1 Source cves: CVE-2025-34351 Source advisory: OSV:GHSA-GX77-XGC2-4888...

aana (>=0.2.1, <=0.2.4), ablator (>=0.0.1b1, <=0.0.1b3) +418 more potentially affected by CVE-2025-34351 via ray (>=2.0.0, <=2.51.1)

ray PYPI version =2.0.0, =0.2.1, =0.0.1b1, =0.2.0, =1.0.4, =1.3.0, =1.0.1, =1.0.3, =2.0.3, =2.0.3, =1.6.0, =1.4.0, =1.15.4 and more Source cves: CVE-2025-34351 Source advisory: OSV:GHSA-GX77-XGC2-4888...

deepnlpf (>=0.0.18, <=0.0.20) potentially affected by CVE-2025-34351 via ray (1.11.0)

ray PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - deepnlpf =0.0.18, =0.0.20 Source cves: CVE-2025-34351 Source advisory: OSV:GHSA-GX77-XGC2-4888...

autogluon (>=0.4.1b20220318, <=0.4.3), autotst (>=1.0.0, <=1.2.0) +7 more potentially affected by CVE-2025-34351 via ray (1.10.0)

ray PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.4.1b20220318, =1.0.0, =0.0.1, =0.0.0, =0.1.0, =1.7.8, =0.1.5, =0.1.6 Source cves: CVE-2025-34351 Source advisory: OSV:GHSA-GX77-XGC2-4888...

gym-jiminy-rllib (1.6.27), gym-recorder (>=0.0.2, <=0.0.3) +5 more potentially affected by CVE-2025-34351 via ray (1.4.1)

ray PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - gym-jiminy-rllib 1.6.27 - gym-recorder =0.0.2, =1.6.3, =2.1.41, =2021.7.21.dev0, =2021.7.30.dev0 - raylab 0.15.10 Source cves: CVE-2025-34351 Source...

biome-text (>=3.0.0, <=3.2.1), deepcomp (>=1.2.4, <=1.2.5) +7 more potentially affected by CVE-2025-34351 via ray (1.3.0)

ray PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - biome-text =3.0.0, =1.2.4, =0.4.2rc0, =0.0.7, =0.2.0, =2021.6.12.dev0, =2021.6.17.dev0 Source cves: CVE-2025-34351 Source advisory: OSV:GHSA-GX77-XGC2-488...