542 matches found
ray vulnerable to Insertion of Sensitive Information into Log File
Versions of the package ray before 2.43.0 are vulnerable to Insertion of Sensitive Information into Log File where the redis password is being logged in the standard logging. If the redis password is passed as an argument, it will be logged and could potentially leak the password. This is only...
GHSA-W4RH-FGX7-Q63M ray vulnerable to Insertion of Sensitive Information into Log File
Versions of the package ray before 2.43.0 are vulnerable to Insertion of Sensitive Information into Log File where the redis password is being logged in the standard logging. If the redis password is passed as an argument, it will be logged and could potentially leak the password. This is only...
PYSEC-2025-23
Versions of the package ray before 2.43.0 are vulnerable to Insertion of Sensitive Information into Log File where the redis password is being logged in the standard logging. If the redis password is passed as an argument, it will be logged and could potentially leak the password. This is only...
ablator (>=0.0.1b1 <=0.0.1b2), ablator-ken-test (=0.0.1b2) +226 more potentially affected by CVE-2025-1979 via ray (>=0.5.0 <=2.42.1)
ray PYPI version =0.5.0, =0.0.1b1, =0.1.1, =0.0.3, =0.1.16, =0.1.4, =0.2.1, =1.1.1, =0.1.3, =1.0.11 - argos-trains =0.1.0 and more Source cves: CVE-2025-1979 Source advisory: OSV:PYSEC-2025-23...
CVE-2025-1979
Versions of the package ray before 2.43.0 are vulnerable to Insertion of Sensitive Information into Log File where the redis password is being logged in the standard logging. If the redis password is passed as an argument, it will be logged and could potentially leak the password. This is only...
CVE-2025-1979
Summary: CVE-2025-1979 affects the Python package Ray prior to 2.43.0, where the Redis password can be logged in standard logging when the password is passed as an argument. This is exploitable if logging is enabled, Redis uses password authentication, and those logs are accessible to an attacker...
CVE-2025-1979
Versions of the package ray before 2.43.0 are vulnerable to Insertion of Sensitive Information into Log File where the redis password is being logged in the standard logging. If the redis password is passed as an argument, it will be logged and could potentially leak the password. This is only...
CVE-2025-1979
Versions of the package ray before 2.43.0 are vulnerable to Insertion of Sensitive Information into Log File where the redis password is being logged in the standard logging. If the redis password is passed as an argument, it will be logged and could potentially leak the password. This is only...
ray 日志信息泄露漏洞
Ray is a unified framework for scaling AI and Python applications open-sourced by ray-project. A security vulnerability exists in versions of ray prior to 2.43.0 that stems from the insertion of sensitive information into a log file, which could lead to the disclosure of redis passwords...
Race Condition
Overview ray is an A system for parallel and distributed Python that unifies the ML ecosystem. Affected versions of this package are vulnerable to Race Condition in multi-threaded environments, attackers exploiting concurrent access can trigger unexpected behavior in MetricsLogger methods,...
ablator (>=0.0.1b1 <=0.0.1b2), ablator-ken-test (=0.0.1b2) +125 more potentially affected by unknown CVE via ray (>=2.0.0 <=2.41.0)
ray PYPI version =2.0.0, =0.0.1b1, =0.2.5, =0.2.2, =1.1.1, =0.5.3b20221011, =0.1.1b20230324, =0.4.2 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-RAY-9055245...
GHSA-XG2H-7CXJ-3GVH Withdrawn Advisory: Command injection in Ray
Withdrawn Advisory This advisory is a duplicate of GHSA-6wgj-66m2-xxp2 / CVE-2023-48022. Original Description An issue in Anyscale Inc Ray between v.2.9.3 and v.2.40.0 allows a remote attacker to execute arbitrary code via a crafted script...
Withdrawn Advisory: Command injection in Ray
Withdrawn Advisory This advisory is a duplicate of GHSA-6wgj-66m2-xxp2 / CVE-2023-48022. Original Description An issue in Anyscale Inc Ray between v.2.9.3 and v.2.40.0 allows a remote attacker to execute arbitrary code via a crafted script...
CVE-2024-57000
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-48022. Reason: This candidate is a duplicate of CVE-2023-48022. Notes: All CVE users should reference CVE-2023-48022 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
ablator (>=0.0.1b1 <=0.0.1b2), ablator-ken-test (=0.0.1b2) +132 more potentially affected by CVE-2025-1979 via ray (>=2.0.0 <=2.42.1)
ray PYPI version =2.0.0, =0.0.1b1, =0.2.5, =0.2.2, =1.1.1, =0.5.3b20221011, =0.1.1b20230324, =0.4.2 and more Source cves: CVE-2025-1979 Source advisory: SNYK:PYTHON-RAY-8745212...
Insertion of Sensitive Information into Log File
Overview ray is an A system for parallel and distributed Python that unifies the ML ecosystem. Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File where the redis password is being logged in the standard logging. If the redis password is passed as ...
CVE-2024-57000
CVE-2024-57000 is a duplicate of CVE-2023-48022. The connected records tie CVE-2023-48022 to a Ray remote code execution issue via the agent/job submission endpoint (affecting Ray v2.9.3–2.40.0; exploitation is demonstrated by a Metasploit module), with references from Nessus (Ray Dashboard Job R...