Loading
Ray provides a simple, universal API for building distributed applications.
No LLM SDK, agent framework or MCP dependency in its latest release, and none among the tracked dependencies.
Advisories that name ray as affected. Advisory records do not state an ecosystem, so packages with the same name in other ecosystems also match. For a version-exact check of your own dependencies, use Stack Check.
| Advisory | Severity | Affected | Fixed in | Published |
|---|---|---|---|---|
| CVE-2026-41486GHSA-mw35-8rx3-xf9r: Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization | High | >= 2.49.0, < 2.55.0 | 2.55.0 | 2026-04-24 |
| CVE-2026-27482GHSA-q5fh-2hc8-f6rq: Ray dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion) | Medium | < 2.54.0 | 2.54.0 | 2026-02-20 |
As declared in PyPI metadata for version 2.59.0. Optional extras are listed with their extra name.
Among the packages in the registry; not every dependent on PyPI.