ray
2.60.0Ray is an AI compute engine. Ray consists of a core distributed runtime and a set of AI Libraries for accelerating ML workloads.
- Maintenance
- Active1642 commits in 3 months · bus factor 17
- License
- Apache-2.0Permissive · OSI-approved
- Security
- 4 advisories1 critical, 2 high, 1 medium · Scorecard 5.7/10
- Supported versions
- No scheduleendoflife.date does not track this project
44.3k stars · 8.3k forks · 3.8k open issues · last release 11 days ago · data checked 1 hour ago
Security advisories
All advisories on GitHubThe 4 most recent advisories published by the maintainers: 1 critical, 2 high, 1 medium. Check the patched version against the one you run.
- highCVE-2026-57516Jul 1, 2026Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False)
- Affected
- < 2.56.0
- Patched in
- >= 2.56.0
- highCVE-2026-41486Apr 21, 2026Remote Code Execution via Parquet Arrow Extension Type Deserialization
- Affected
- 2.54.0
- Patched in
- 2.55.0
- mediumCVE-2026-27482Feb 20, 2026Dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)
- Affected
- < 2.54.0
- Patched in
- 2.54.0
- criticalCVE-2025-62593Nov 26, 2025Critical RCE Vulnerability against Ray Devs exploitable via Browser (Safari & Firefox) due to DNS Rebinding Attack
- Affected
- < 2.52.0
- Patched in
- 2.52.0