CGA-rh6r-pgx2-378c

NVD notes that this CVE has been rejected as a result of upstream contesting the findings (https://nvd.nist.gov/vuln/detail/CVE-2025-34351). They also note that it's considered a duplicate of CVE-2023-48022 which was also disputed

This vulnerability affects the Ray Python module. Updating Ray beyond version 2.47 currently violates Airflow’s dependency constraints. To address the issue, the upstream project will need to update its dependencies and version requirements, and upgrade Ray to version 2.52. See upstream issue: https://github.com/apache/airflow/issues/52550