{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Ray-Project vulnerabilities","home_page_url":"https://patchfirst.co/vendor/ray-project/","feed_url":"https://patchfirst.co/feed/vendor/ray-project.json","description":"New and newly exploited Ray-Project CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2025-62593#kev","url":"https://patchfirst.co/cve/CVE-2025-62593/","title":"[KEV] CVE-2025-62593: Ray-Project Ray Code Injection Vulnerability","content_text":"Ray-Project · Ray. In CISA KEV since 2026-08-17. ENISA EUVD lists it as exploited. EPSS 60.2% (higher than 99.13% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 74.0 of 100.","summary":"Ray-Project Ray Code Injection Vulnerability","date_published":"2026-08-17T00:00:00.000Z","date_modified":"2026-10-19T13:10:00.000Z","tags":["kev","public-exploit","T1189","T1059"],"_patchfirst":{"reason":"kev","priority":74,"kev":{"dateAdded":"2026-08-17","ransomware":false},"epss":{"score":0.6015,"percentile":0.99134},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Ray-Project","product":"Ray","techniqueIds":["T1189","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-6019","url":"https://patchfirst.co/cve/CVE-2023-6019/","title":"CVE-2023-6019: Ray Command Injection in cpu_profile Parameter","content_text":"ray-project · ray-project/ray. Not in CISA KEV. EPSS 74.6% (higher than 99.5% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 36.7 of 100.","summary":"Ray Command Injection in cpu_profile Parameter","date_published":"2023-11-16T00:00:00.000Z","date_modified":"2024-08-02T08:21:17.000Z","tags":["public-exploit","T1190","T1059"],"_patchfirst":{"reason":"published","priority":36.7,"kev":null,"epss":{"score":0.7463,"percentile":0.99499},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"ray-project","product":"ray-project/ray","techniqueIds":["T1190","T1059"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-6021","url":"https://patchfirst.co/cve/CVE-2023-6021/","title":"CVE-2023-6021: Ray Log File Local File Include","content_text":"ray-project · ray-project/ray. Not in CISA KEV. EPSS 37.1% (higher than 98.5% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Named in 1 threat report. Priority 34.9 of 100.","summary":"Ray Log File Local File Include","date_published":"2023-11-16T00:00:00.000Z","date_modified":"2024-11-27T17:07:03.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":34.9,"kev":null,"epss":{"score":0.37076,"percentile":0.98515},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"ray-project","product":"ray-project/ray","techniqueIds":[],"reportCount":1,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-6020","url":"https://patchfirst.co/cve/CVE-2023-6020/","title":"CVE-2023-6020: Ray Static File Local File Include","content_text":"ray-project · ray-project/ray. Not in CISA KEV. EPSS 14.7% (higher than 96.7% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Named in 1 threat report. Priority 34.5 of 100.","summary":"Ray Static File Local File Include","date_published":"2023-11-16T00:00:00.000Z","date_modified":"2024-08-02T08:21:17.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":34.5,"kev":null,"epss":{"score":0.14652,"percentile":0.96656},"cvss":{"score":7.5,"severity":"HIGH","version":"3.0"},"vendor":"ray-project","product":"ray-project/ray","techniqueIds":[],"reportCount":1,"hasPublicExploit":true,"euvdExploited":false}}]}