Skip to content
OpenAdvisories

Vendor

Anyscale

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.8

    Ray < 2.56.0 Unsafe Deserialization RCE via WebDataset Reader

    Ray prior to 2.56.0 contains an unsafe deserialization vulnerability in the WebDataset reader that allows attackers to achieve remote code execution by supplying a malicious tar archive to the read_webdataset() function. The _default_decoder() function in web…