Anyscale Ray Serve Cross-Site Scripting via X-Request-Id Response Header Reflection

Affected Vendor(s)

Affected Product(s)

Summary

Timeline

Discovered on
February 19, 2026
Disclosed to Vendor on
February 19, 2026
Published on

Credit

Blog Post

References