bentoml vulnerabilities (PyPI)
17 vulnerabilities.
-
bentomlPyPI bentoml OpenLLM Model Repository Directory Name common.py async_run_command command injection 4.8 Medium -
bentomlPyPI BentoML: Dockerfile command injection via envs[*].name in bentofile.yaml 8.8 High -
bentomlPyPI BentoML: Dockerfile command injection via docker.base_image 8.8 High -
bentomlPyPI BentoML has Information Disclosure in `bentoml build` via symlink traversal in the build context 5.5 Medium -
bentomlPyPI BentoML has a Server-Side Template Injection via unsandboxed Jinja2 Environment in Dockerfile generation 8.8 High -
bentomlPyPI BentoML: command injection in cloud deployment setup script (deployment.py) 7.8 High -
bentomlPyPI BentoML has Dockerfile Command Injection via system_packages in bentofile.yaml 7.8 High -
bentomlPyPI BentoML has an Arbitrary File Write via Symlink Path Traversal in Tar Extraction 8.6 High -
bentomlPyPI BentoML has a Path Traversal via Bentofile Configuration 7.4 High -
bentomlPyPI BentoML is Vulnerable to an SSRF Attack Through File Upload Processing 9.9 Critical -
bentomlPyPI Insecure Deserialization leads to RCE in BentoML's runner server 9.8 Critical -
bentomlPyPI BentoML Allows Remote Code Execution (RCE) via Insecure Deserialization 9.8 Critical -
bentomlPyPI BentoML vulnerable to Uncontrolled Resource Consumption 7.5 High -
bentomlPyPI Deserialization Vulnerability in BentoML's Runner Server in bentoml/bentoml 9.8 Critical -
bentomlPyPI Denial of Service in bentoml/bentoml 7.5 High -
bentomlPyPI BentoML Open Redirect vulnerability 6.1 Medium -
bentomlPyPI Insecure Deserialization Leading to RCE in bentoml/bentoml 10.0 Critical