Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

ray-project/ray

              master @ c98fa00
            

Fixes

CVEs

CRITICAL

Peak severity

39.5%

Coverage

Highlights

Dependency Vulnerability: 16 prior fixes. Scrutinize any change in this area.

java/dependencies.bzl: most-fixed (13 issues). Treat as high-risk during review.

64 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Insecure Deserialization: Multiple datasources allow untrusted pickle/cloudpickle/torch.load deserialization from attacker-controlled files, leading to RCE. Fixes add opt-in guards or default-deny flags, but each datasource was patched independently, leaving variant risk.

Authentication Bypass: Internal gRPC services lacked token auth or TLS, enabling unauthenticated RCE via pickle. Streaming RPCs bypassed auth checks; token caching and audience validation were also flawed.

Path Traversal: Archive extraction (zip/tar) and log file globbing allowed writing/reading files outside intended directories. Multiple fixes add path canonicalization and containment checks, but each extraction path was patched separately.