ablator (>=0.0.1b1, <=0.0.1b3), ablator-ken-test (0.0.1b2) +159 more potentially affected by CVE-2023-6020 via ray (>=0.5.0, <=2.8.0)

ray PYPI version =0.5.0, =0.0.1b1, =0.1.1, =0.0.3, =0.0.1, =0.1.16, =0.1.4, =0.2.1, =0.10.0, =0.3.6, =0.1.3, =1.0.11 - argos-trains 0.1.0 and more Source cves: CVE-2023-6020 Source advisory: MEND:CVE-2023-6020...

CVE-2023-6020 Ray Static File Local File Include

LFI in Ray's /static/ directory allows attackers to read any file on the server without authentication...

CVE-2023-6020

LFI in Ray's /static/ directory allows attackers to read any file on the server without authentication...

ablator (>=0.0.1b1, <=0.0.1b3), ablator-ken-test (0.0.1b2) +63 more potentially affected by CVE-2023-48022 +4 more via ray (>=2.0.0, <=2.8.0)

ray PYPI version =2.0.0, =0.0.1b1, =0.0.1, =0.2.2, =0.10.0, =0.3.6, =0.5.3b20221011, =0.1.1b20230324, =0.5.3b20221011, =0.5.3b20221011, =0.5.3b20221116, =0.0.3, =0.0.4 and more Source cves: CVE-2023-48022, CVE-2023-48023, CVE-2023-6019, CVE-2023-6020, CVE-2023-6021 Source advisory:...

pydgn (>=0.5.0, <=1.2.6), raylab (0.16.0) potentially affected by CVE-2023-48022 +2 more via ray (1.5.2)

ray PYPI version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - pydgn =0.5.0, =1.2.6 - raylab 0.16.0 Source cves: CVE-2023-48022, CVE-2023-48023, CVE-2023-6019 Source advisory: OSV:GHSA-H3XG-WV58-5P43...

autogluon (>=0.4.1b20220318, <=0.4.3), autotst (>=1.0.0, <=1.2.0) +7 more potentially affected by CVE-2023-6021 via ray (1.10.0)

ray PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.4.1b20220318, =1.0.0, =0.0.1, =0.0.0, =0.1.0, =1.7.8, =0.1.5, =0.1.6 Source cves: CVE-2023-6021 Source advisory: OSV:GHSA-3PWW-QVR8-6MHP...

deepnlpf (>=0.0.18, <=0.0.20) potentially affected by CVE-2023-48022 +2 more via ray (1.11.0)

ray PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - deepnlpf =0.0.18, =0.0.20 Source cves: CVE-2023-48022, CVE-2023-48023, CVE-2023-6019 Source advisory: OSV:GHSA-H3XG-WV58-5P43...

ablator (>=0.0.1b1, <=0.0.1b3), ablator-ken-test (0.0.1b2) +63 more potentially affected by CVE-2023-6021 via ray (>=2.0.0, <=2.8.0)

ray PYPI version =2.0.0, =0.0.1b1, =0.0.1, =0.2.2, =0.10.0, =0.3.6, =0.5.3b20221011, =0.1.1b20230324, =0.5.3b20221011, =0.5.3b20221011, =0.5.3b20221116, =0.0.3, =0.0.4 and more Source cves: CVE-2023-6021 Source advisory: OSV:GHSA-3PWW-QVR8-6MHP...

abmarl (>=0.2.3, <=0.2.4), autogluon (>=0.4.3b20220611, <=0.4.3b20220617) +4 more potentially affected by CVE-2023-48022 +2 more via ray (1.12.1)

ray PYPI version 1.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - abmarl =0.2.3, =0.4.3b20220611, =3.1.1, =2022.7.7.dev1, =1.2.0, =1.2.1 Source cves: CVE-2023-48022, CVE-2023-48023, CVE-2023-6019 Source advisory:...

abmarl (>=0.2.3, <=0.2.4), autogluon (>=0.4.3b20220611, <=0.4.3b20220617) +4 more potentially affected by CVE-2023-6021 via ray (1.12.1)

ray PYPI version 1.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - abmarl =0.2.3, =0.4.3b20220611, =3.1.1, =2022.7.7.dev1, =1.2.0, =1.2.1 Source cves: CVE-2023-6021 Source advisory: OSV:GHSA-3PWW-QVR8-6MHP...

gen2-connector (>=1.0.0b44, <=1.0.0b47) potentially affected by CVE-2023-6021 via ray (1.5.1)

ray PYPI version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - gen2-connector =1.0.0b44, =1.0.0b47 Source cves: CVE-2023-6021 Source advisory: OSV:GHSA-3PWW-QVR8-6MHP...

biome-text (3.3.0), discern-reconstruction (>=0.1.0, <=0.1.1) +5 more potentially affected by CVE-2023-6021 via ray (1.6.0)

ray PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - biome-text 3.3.0 - discern-reconstruction =0.1.0, =0.1.7, =0.0.3.dev0, =0.2.4, =1.3.0, =2.2.10 - raylab 0.16.1 Source cves: CVE-2023-6021 Source advisory:...

deepnlpf (>=0.0.18, <=0.0.20) potentially affected by CVE-2023-6021 via ray (1.11.0)

ray PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - deepnlpf =0.0.18, =0.0.20 Source cves: CVE-2023-6021 Source advisory: OSV:GHSA-3PWW-QVR8-6MHP...

deepcomp (>=1.0.0, <=1.0.1), hub (>=1.0.0a0, <=1.0.0a4) +3 more potentially affected by CVE-2023-6021 via ray (1.0.0)

ray PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - deepcomp =1.0.0, =1.0.0a0, =0.1.1.1, =2.0.1, =0.0.1, =0.0.9 Source cves: CVE-2023-6021 Source advisory: OSV:GHSA-3PWW-QVR8-6MHP...

deepcomp (>=1.0.0, <=1.0.1), hub (>=1.0.0a0, <=1.0.0a4) +3 more potentially affected by CVE-2023-48022 +2 more via ray (1.0.0)

ray PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - deepcomp =1.0.0, =1.0.0a0, =0.1.1.1, =2.0.1, =0.0.1, =0.0.9 Source cves: CVE-2023-48022, CVE-2023-48023, CVE-2023-6019 Source advisory:...

deephyper (>=0.1.1, <=0.1.2) potentially affected by CVE-2023-48022 +2 more via ray (0.7.2)

ray PYPI version 0.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - deephyper =0.1.1, =0.1.2 Source cves: CVE-2023-48022, CVE-2023-48023, CVE-2023-6019 Source advisory: OSV:GHSA-H3XG-WV58-5P43...

farm-haystack (>=0.10.0, <=1.0.0), kserve (>=0.7.0rc0, <=0.7.0) potentially affected by CVE-2023-6021 via ray (1.5.0)

ray PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - farm-haystack =0.10.0, =0.7.0rc0, =0.7.0 Source cves: CVE-2023-6021 Source advisory: OSV:GHSA-3PWW-QVR8-6MHP...

ablator (>=0.0.1b1, <=0.0.1b3), ablator-ken-test (0.0.1b2) +63 more potentially affected by CVE-2023-48023 +1 more via ray (>=2.0.0, <=2.8.0)

ray PYPI version =2.0.0, =0.0.1b1, =0.0.1, =0.2.2, =0.10.0, =0.3.6, =0.5.3b20221011, =0.1.1b20230324, =0.5.3b20221011, =0.5.3b20221011, =0.5.3b20221116, =0.0.3, =0.0.4 and more Source cves: CVE-2023-48023, CVE-2023-6019 Source advisory: GHSA-H3XG-WV58-5P43...

pyebsdindex (0.1.0rc2) potentially affected by CVE-2023-48022 +2 more via ray (1.11.1)

ray PYPI version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - pyebsdindex 0.1.0rc2 Source cves: CVE-2023-48022, CVE-2023-48023, CVE-2023-6019 Source advisory: OSV:GHSA-H3XG-WV58-5P43...

autogluon (>=0.3.2b20220126, <=0.4.1b20220317), gen2-connector (>=1.0.0b48, <=1.0.0b56) +2 more potentially affected by CVE-2023-6021 via ray (1.8.0)

ray PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.3.2b20220126, =1.0.0b48, =0.0.7.post1, =0.1.0b0, =0.1.3 Source cves: CVE-2023-6021 Source advisory: OSV:GHSA-3PWW-QVR8-6MHP...