Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-6020
7.5
HIGHCVSS v3
Severity scale
010
Description
LFI in Ray's /static/ directory allows attackers to read any file on the server without authentication.
ray-project/ray
GitHubRay is an AI compute engine. Ray consists of a core distributed runtime and a set of AI Libraries for accelerating ML workloads.
GitHubRay is an AI compute engine. Ray consists of a core distributed runtime and a set of AI Libraries for accelerating ML workloads.all versions, < 2.8.1NVD