ray-project Ray

• CVE-2025-62593 Critical 9.4 Exploited Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack 60.2%
• CVE-2026-41486 High 8.9 Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization 0.5%
• CVE-2026-32981 High 7.5 Ray Dashboard <= 2.8.0 Path Traversal Leading to Local File Disclosure 1.0%
• CVE-2026-27482 Medium 5.9 Ray: Dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion) 0.3%