Filtered by vendor Anyscale Subscriptions
Filtered by product Ray Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-34351 1 Anyscale 1 Ray 2025-12-02 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. At the request of the MITRE TL-Root and following the CVE Program’s Dispute Policy, it has been determined that this assignment did not identify a valid vulnerability based on the vendor's product security model.
CVE-2023-48022 2 Anyscale, Redhat 2 Ray, Openshift Ai 2025-08-07 9.8 Critical
Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment
CVE-2023-48023 1 Anyscale 1 Ray 2024-11-21 9.1 Critical
Anyscale Ray 2.6.3 and 2.8.0 allows /log_proxy SSRF. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment