critical9.8
CVE-2024-57000
Withdrawn Advisory: Command injection in Ray
Impact
# Withdrawn Advisory This advisory is a duplicate of GHSA-6wgj-66m2-xxp2 / CVE-2023-48022. # Original Description An issue in Anyscale Inc Ray between v.2.9.3 and v.2.40.0 allows a remote attacker to execute arbitrary code via a crafted script.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | ray | >= 2.9.3, <= 2.40.0 | none recorded |