modin (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-41486 via ray (0.5.0)

ray PYPI version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - modin =0.1.0, =0.1.1 Source cves: CVE-2026-41486 Source advisory: OSV:PYSEC-2026-2272...

flambe (>=0.4.11, <=0.4.13) potentially affected by CVE-2026-41486 via ray (0.7.6)

ray PYPI version 0.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - flambe =0.4.11, =0.4.13 Source cves: CVE-2026-41486 Source advisory: OSV:PYSEC-2026-2272...

smarts (>=0.4.2, <=0.4.6.post0), ultra-rl (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-41486 via ray (0.8.3)

ray PYPI version 0.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - smarts =0.4.2, =0.1.0, =0.1.1 Source cves: CVE-2026-41486 Source advisory: OSV:PYSEC-2026-2272...

encdecmeta (0.0.3), nevopy (>=0.0.1, <=0.2.3) potentially affected by CVE-2026-41486 via ray (1.1.0)

ray PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - encdecmeta 0.0.3 - nevopy =0.0.1, =0.2.3 Source cves: CVE-2026-41486 Source advisory: OSV:PYSEC-2026-2272...

farm-haystack (>=0.10.0, <=1.0.0), kserve (>=0.7.0rc0, <=0.7.0) potentially affected by CVE-2026-41486 via ray (1.5.0)

ray PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - farm-haystack =0.10.0, =0.7.0rc0, =0.7.0 Source cves: CVE-2026-41486 Source advisory: OSV:PYSEC-2026-2272...

biome-text (3.3.0), discern-reconstruction (>=0.1.0, <=0.1.1) +5 more potentially affected by CVE-2026-41486 via ray (1.6.0)

ray PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - biome-text 3.3.0 - discern-reconstruction =0.1.0, =0.1.7, =0.0.3.dev0, =0.2.4, =1.3.0, =2.2.10 - raylab 0.16.1 Source cves: CVE-2026-41486 Source advisory...

autogluon (>=0.3.2b20211214, <=0.3.2b20220125), msapy (>=0.0.1, <=1.0.0) potentially affected by CVE-2026-41486 via ray (1.7.1)

ray PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.3.2b20211214, =0.0.1, =1.0.0 Source cves: CVE-2026-41486 Source advisory: OSV:PYSEC-2026-2272...

autogluon (>=0.3.2b20220126, <=0.4.1b20220317), gen2-connector (>=1.0.0b48, <=1.0.0b56) +2 more potentially affected by CVE-2026-41486 via ray (1.8.0)

ray PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.3.2b20220126, =1.0.0b48, =0.0.7.post1, =0.1.0b0, =0.1.3 Source cves: CVE-2026-41486 Source advisory: OSV:PYSEC-2026-2272...

gen2-connector (>=1.0.0b57, <=1.0.0b59), kserve (>=0.8.0rc0, <=0.8.0.2) +2 more potentially affected by CVE-2026-41486 via ray (1.9.0)

ray PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - gen2-connector =1.0.0b57, =0.8.0rc0, =0.0.2, =0.1.0, =0.1.2 Source cves: CVE-2026-41486 Source advisory: OSV:PYSEC-2026-2272...

flopyarcade (>=0.3.35, <=0.6.3), gen2-connector (1.0.0b61) +1 more potentially affected by CVE-2026-41486 via ray (1.9.2)

ray PYPI version 1.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - flopyarcade =0.3.35, =0.0.7, =0.1.4 Source cves: CVE-2026-41486 Source advisory: OSV:PYSEC-2026-2272...

autogluon (>=0.4.1b20220318, <=0.4.3), autotst (>=1.0.0, <=1.2.0) +7 more potentially affected by CVE-2026-41486 via ray (1.10.0)

ray PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.4.1b20220318, =1.0.0, =0.0.1, =0.0.0, =0.1.0, =1.7.8, =0.1.5, =0.1.6 Source cves: CVE-2026-41486 Source advisory: OSV:PYSEC-2026-2272...

deepnlpf (>=0.0.18, <=0.0.20) potentially affected by CVE-2026-41486 via ray (1.11.0)

ray PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - deepnlpf =0.0.18, =0.0.20 Source cves: CVE-2026-41486 Source advisory: OSV:PYSEC-2026-2272...

actorch (>=0.0.3, <=0.0.5), aliby (>=0.1.18, <=0.1.55) +38 more potentially affected by CVE-2026-41486 via ray (1.13.0)

ray PYPI version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - actorch =0.0.3, =0.1.18, =0.1.11, =0.1.3, =0.4.3b20220618, =0.4.3b20220618, =0.4.3b20220618, =0.0.14, =11.1.0, =0.1.0, =0.2.0, =0.0.1, =0.0.9, =0.1.3 and...

bioneuralnet (1.2.2), collectivecrossing (>=0.1.2, <=0.1.3) +15 more potentially affected by CVE-2026-41486 via ray (>=2.49.2, <=2.54.0)

ray PYPI version =2.49.2, =0.1.2, =1.0.1, =0.2.2, =0.6.0, =0.3.0, =5.8.7, =6.3.0 and more Source cves: CVE-2026-41486 Source advisory: MEND:CVE-2026-41486...

CVE-2026-41486 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9...

bioneuralnet (1.2.2), collectivecrossing (>=0.1.2, <=0.1.3) +15 more potentially affected by CVE-2026-41486 via ray (>=2.49.2, <=2.54.0)

ray PYPI version =2.49.2, =0.1.2, =1.0.1, =0.2.2, =0.6.0, =0.3.0, =5.8.7, =6.3.0 and more Source cves: CVE-2026-41486 Source advisory: OSV:GHSA-MW35-8RX3-XF9R...

bioneuralnet (1.2.2), collectivecrossing (>=0.1.2, <=0.1.3) +15 more potentially affected by CVE-2026-41486 via ray (>=2.49.2, <=2.54.0)

ray PYPI version =2.49.2, =0.1.2, =1.0.1, =0.2.2, =0.6.0, =0.3.0, =5.8.7, =6.3.0 and more Source cves: CVE-2026-41486 Source advisory: SNYK:PYTHON-RAY-16298062...

bioneuralnet (1.2.2), collectivecrossing (>=0.1.2, <=0.1.3) +15 more potentially affected by CVE-2026-41486 via ray (>=2.49.2, <=2.54.0)

ray PYPI version =2.49.2, =0.1.2, =1.0.1, =0.2.2, =0.6.0, =0.3.0, =5.8.7, =6.3.0 and more Source cves: CVE-2026-41486 Source advisory: GHSA-MW35-8RX3-XF9R...