Known exploited vulnerabilities
Ray-Project vulnerabilities attackers have used
Every Ray-Project vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.
The short answer
CISA lists 1 Ray-Project vulnerability as exploited in the wild, 1 of them added in the last 12 months. The most recent is CVE-2025-62593, added Aug 17, 2026. Ray has the most entries (1).
- In KEV, all time
- 1
- Added, last 12 months
- 1
- Used in ransomware
- 0
- New CVEs this week
- 0
Every Ray-Project entry in CISA KEV
CVE-2025-62593
Added · dueRay-Project Ray Code Injection Vulnerability
Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Developers using Ray as a development tool may be exposed to this vulnerability exploitable through Firefox and Safari.
Related
Know the day a CVE lands in your code
Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.