Skip to content
Threat Feed
Subscribe

Vendor

Ray-Project

2 briefs RSS
high threat

Active Exploitation of Code Injection Vulnerability in Ray

CISA has added CVE-2025-62593, a code injection vulnerability in the Ray framework, to its Known Exploited Vulnerabilities catalog following reports of active exploitation.

exploited Ray
2t 1c updated
high advisory

Directory Traversal and LFI in Ray 2.56.0

Ray 2.56.0 contains a directory traversal and local file inclusion vulnerability in the /api/v0/logs endpoint allowing unauthenticated attackers to read arbitrary files.

Ray webapps directory-traversal lfi
1r 2t