1440 matches found
flopyarcade (>=0.3.35, <=0.6.3), gen2-connector (1.0.0b61) +1 more potentially affected by CVE-2023-6020 via ray (1.9.2)
ray PYPI version 1.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - flopyarcade =0.3.35, =0.0.7, =0.1.4 Source cves: CVE-2023-6020 Source advisory: OSV:GHSA-6CXR-8Q3M-JWRR...
autogluon (>=0.4.1b20220318, <=0.4.3), autotst (>=1.0.0, <=1.2.0) +7 more potentially affected by CVE-2023-6020 via ray (1.10.0)
ray PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.4.1b20220318, =1.0.0, =0.0.1, =0.0.0, =0.1.0, =1.7.8, =0.1.5, =0.1.6 Source cves: CVE-2023-6020 Source advisory: OSV:GHSA-6CXR-8Q3M-JWRR...
hydra-ray-launcher (1.2.0), ray-on-aml (>=0.1.8, <=0.2.1) +1 more potentially affected by CVE-2023-6020 via ray (1.12.0)
ray PYPI version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - hydra-ray-launcher 1.2.0 - ray-on-aml =0.1.8, =0.2.1 - txp 0.2.17 Source cves: CVE-2023-6020 Source advisory: OSV:GHSA-6CXR-8Q3M-JWRR...
autogluon (>=0.3.2b20211214, <=0.3.2b20220125), msapy (>=0.0.1, <=1.0.0) potentially affected by CVE-2023-6020 via ray (1.7.1)
ray PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.3.2b20211214, =0.0.1, =1.0.0 Source cves: CVE-2023-6020 Source advisory: OSV:GHSA-6CXR-8Q3M-JWRR...
deepnlpf (>=0.0.18, <=0.0.20) potentially affected by CVE-2023-6020 via ray (1.11.0)
ray PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - deepnlpf =0.0.18, =0.0.20 Source cves: CVE-2023-6020 Source advisory: OSV:GHSA-6CXR-8Q3M-JWRR...
biome-text (3.3.0), discern-reconstruction (>=0.1.0, <=0.1.1) +5 more potentially affected by CVE-2023-6020 via ray (1.6.0)
ray PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - biome-text 3.3.0 - discern-reconstruction =0.1.0, =0.1.7, =0.0.3.dev0, =0.2.4, =1.3.0, =2.2.10 - raylab 0.16.1 Source cves: CVE-2023-6020 Source advisory:...
autogluon (>=0.3.2b20220126, <=0.4.1b20220317), gen2-connector (>=1.0.0b48, <=1.0.0b56) +2 more potentially affected by CVE-2023-6020 via ray (1.8.0)
ray PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.3.2b20220126, =1.0.0b48, =0.0.7.post1, =0.1.0b0, =0.1.3 Source cves: CVE-2023-6020 Source advisory: OSV:GHSA-6CXR-8Q3M-JWRR...
aisfx (0.0.0) potentially affected by CVE-2023-6020 via ray (1.7.0)
ray PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - aisfx 0.0.0 Source cves: CVE-2023-6020 Source advisory: OSV:GHSA-6CXR-8Q3M-JWRR...
ablator (>=0.0.1b1, <=0.0.1b3), ablator-ken-test (0.0.1b2) +63 more potentially affected by CVE-2023-6020 via ray (>=2.0.0, <=2.8.0)
ray PYPI version =2.0.0, =0.0.1b1, =0.0.1, =0.2.2, =0.10.0, =0.3.6, =0.5.3b20221011, =0.1.1b20230324, =0.5.3b20221011, =0.5.3b20221011, =0.5.3b20221116, =0.0.3, =0.0.4 and more Source cves: CVE-2023-6020 Source advisory: OSV:GHSA-6CXR-8Q3M-JWRR...
deepcomp (>=1.0.0, <=1.0.1), hub (>=1.0.0a0, <=1.0.0a4) +3 more potentially affected by CVE-2023-6020 via ray (1.0.0)
ray PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - deepcomp =1.0.0, =1.0.0a0, =0.1.1.1, =2.0.1, =0.0.1, =0.0.9 Source cves: CVE-2023-6020 Source advisory: OSV:GHSA-6CXR-8Q3M-JWRR...
deephyper (>=0.1.1, <=0.1.2) potentially affected by CVE-2023-6020 via ray (0.7.2)
ray PYPI version 0.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - deephyper =0.1.1, =0.1.2 Source cves: CVE-2023-6020 Source advisory: OSV:GHSA-6CXR-8Q3M-JWRR...
flambe (>=0.4.11, <=0.4.13) potentially affected by CVE-2023-6020 via ray (0.7.6)
ray PYPI version 0.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - flambe =0.4.11, =0.4.13 Source cves: CVE-2023-6020 Source advisory: OSV:GHSA-6CXR-8Q3M-JWRR...
beta-rec (>=0.2.1, <=0.2.2), fluidexec (0.1.0rc0) +1 more potentially affected by CVE-2023-6020 via ray (0.8.5)
ray PYPI version 0.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - beta-rec =0.2.1, =2.6.0, =2.7.0 Source cves: CVE-2023-6020 Source advisory: OSV:GHSA-6CXR-8Q3M-JWRR...
modin (0.6.0) potentially affected by CVE-2023-6020 via ray (0.7.3)
ray PYPI version 0.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - modin 0.6.0 Source cves: CVE-2023-6020 Source advisory: OSV:GHSA-6CXR-8Q3M-JWRR...
smarts (>=0.4.2, <=0.4.6.post0), ultra-rl (>=0.1.0, <=0.1.1) potentially affected by CVE-2023-6020 via ray (0.8.3)
ray PYPI version 0.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - smarts =0.4.2, =0.1.0, =0.1.1 Source cves: CVE-2023-6020 Source advisory: OSV:GHSA-6CXR-8Q3M-JWRR...
auto-augment (1.0.0), bio-pyminer (>=0.9.13, <=0.10.0) +3 more potentially affected by CVE-2023-6020 via ray (0.8.4)
ray PYPI version 0.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - auto-augment 1.0.0 - bio-pyminer =0.9.13, =0.0.0, =0.4.7, =0.4.9 Source cves: CVE-2023-6020 Source advisory: OSV:GHSA-6CXR-8Q3M-JWRR...
pyebsdindex (0.1.0rc2) potentially affected by CVE-2023-6020 via ray (1.11.1)
ray PYPI version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - pyebsdindex 0.1.0rc2 Source cves: CVE-2023-6020 Source advisory: OSV:GHSA-6CXR-8Q3M-JWRR...
connector-db-tools (0.0.1), pdf2dataset (>=0.1.0, <=0.4.0a1) +1 more potentially affected by CVE-2023-6020 via ray (0.8.6)
ray PYPI version 0.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - connector-db-tools 0.0.1 - pdf2dataset =0.1.0, =0.4.10, =0.4.11 Source cves: CVE-2023-6020 Source advisory: OSV:GHSA-6CXR-8Q3M-JWRR...
GHSA-6CXR-8Q3M-JWRR Ray Missing Authorization vulnerability
LFI in Ray's /static/ directory allows attackers to read any file on the server without authentication. The issue is fixed in version 2.8.1+. Ray maintainers response can be found here:...