{"id":"CGA-frf8-8hr7-gjpc","modified":"2026-07-31T08:12:34.550110146Z","published":"2025-10-30T19:02:26Z","withdrawn":"2026-07-31T08:12:34.550110040Z","upstream":["CVE-2025-1979","GHSA-w4rh-fgx7-q63m"],"references":[{"type":"WEB","url":"https://security.snyk.io/vuln/SNYK-PYTHON-RAY-8745212"},{"type":"REPORT","url":"https://github.com/ray-project/ray/issues/50266"},{"type":"FIX","url":"https://github.com/ray-project/ray/commit/64a2e4010522d60b90c389634f24df77b603d85d"},{"type":"FIX","url":"https://github.com/ray-project/ray/pull/50409"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/1xxx/CVE-2025-1979.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1979"}],"affected":[{"package":{"name":"py3.10-wheels-vllm-cuda-11.8","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/py3.10-wheels-vllm-cuda-11.8?arch=x86_64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"ecosystem_specific":{"components":[{"component_name":"ray","component_version":"2.40.0","component_type":"python","component_location":"/usr/share/vllm/.venv/lib/python3.10/site-packages/ray-2.40.0.dist-info/METADATA","component_purl":"pkg:pypi/ray@2.40.0","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2025-03-11T09:13:10Z","architecture":"x86_64"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-frf8-8hr7-gjpc.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:N"}]}