CRITICAL9.8PyPI
PYSEC-2025-32· CVE-2025-32375, GHSA-7v4r-c989-xh26Modified: 6/10/2026
package
PyPI/bentoml
pkg:pypi/bentoml
HIGH7.4PyPI
PYSEC-2026-1218· CVE-2026-24123, GHSA-6r62-w2q3-48hfBentoML has a Path Traversal via Bentofile Configuration
Modified: 7/7/2026
HIGH7.5PyPI
PYSEC-2026-1219· CVE-2024-9056, GHSA-hw8j-hw49-752cBentoML Denial of Service (DoS) via Multipart Boundary
Modified: 7/7/2026
HIGH7.8PyPI
PYSEC-2026-157· CVE-2026-33744, GHSA-jfjg-vc52-wqvfModified: 5/20/2026
HIGH7.8PyPI
PYSEC-2026-158· CVE-2026-35043, GHSA-fgv4-6jr3-jgfwModified: 5/20/2026
CRITICAL9.6PyPI
PYSEC-2026-159· CVE-2026-35044, GHSA-v959-cwq9-7hr6Modified: 5/20/2026
HIGH8.8PyPI
PYSEC-2026-189· CVE-2026-44345, GHSA-78f9-r8mh-4xm2Modified: 6/3/2026
HIGH8.8PyPI
PYSEC-2026-190· CVE-2026-44346, GHSA-w2pm-x38x-jp44Modified: 6/3/2026
HIGH7.8PyPI
PYSEC-2026-2089· CVE-2026-15035Modified: 7/10/2026
—PyPI
PYSEC-2026-2398· CVE-2026-27905, GHSA-m6w7-qv66-g3mfBentoML Vulnerable to Arbitrary File Write via Symlink Path Traversal in Tar Extraction
Modified: 7/13/2026
MEDIUM5.5PyPI
PYSEC-2026-2399· CVE-2026-40610, GHSA-mcfx-4vc6-qgxvBentoML has Information Disclosure in `bentoml build` via symlink traversal in the build context
Modified: 7/13/2026
CRITICAL9.8PyPI
PYSEC-2026-294· CVE-2025-27520, GHSA-33xw-247w-6hmcBentoML Allows Remote Code Execution (RCE) via Insecure Deserialization
Modified: 7/1/2026
CRITICAL9.8PyPI
PYSEC-2026-295· CVE-2024-9070, GHSA-9g44-gwvm-hc44BentoML deserialization vulnerability
Modified: 7/1/2026
CRITICAL9.8PyPI
PYSEC-2026-296· CVE-2024-2912, GHSA-hvj5-mvw9-93j3Insecure deserialization in BentoML
Modified: 7/1/2026
CRITICAL9.9PyPI
PYSEC-2026-297· CVE-2025-54381, GHSA-mrmq-3q62-6cc8BentoML SSRF Vulnerability in File Upload Processing
Modified: 7/1/2026
CRITICAL9.8PyPI
GHSA-33xw-247w-6hmc· CVE-2025-27520, PYSEC-2026-294BentoML Allows Remote Code Execution (RCE) via Insecure Deserialization
Modified: 9/10/2026
MEDIUM6.1PyPI
GHSA-564p-rx2q-4c8vBentoML Open Redirect vulnerability
Modified: 4/15/2025
HIGH7.4PyPI
GHSA-6r62-w2q3-48hf· CVE-2026-24123, PYSEC-2026-1218BentoML has a Path Traversal via Bentofile Configuration
Modified: 7/7/2026
HIGH8.8PyPI
GHSA-78f9-r8mh-4xm2· CVE-2026-44345, PYSEC-2026-189BentoML Dockerfile command injection via docker.base_image (sister of pending GHSA-w2pm-x38x-jp44 / CVE-2026-33744 / CVE-2026-35043)
Modified: 6/9/2026
CRITICAL9.8PyPI
GHSA-7v4r-c989-xh26· CVE-2025-32375, PYSEC-2025-32BentoML's runner server Vulnerable to Remote Code Execution (RCE) via Insecure Deserialization
Modified: 6/10/2026
CRITICAL9.8PyPI
GHSA-9g44-gwvm-hc44· CVE-2024-9070, PYSEC-2026-295BentoML deserialization vulnerability
Modified: 6/29/2026
HIGH7.8PyPI
GHSA-fgv4-6jr3-jgfw· CVE-2026-35043, PYSEC-2026-158BentoML: Command Injection in cloud deployment setup script
Modified: 6/8/2026
HIGH7.5PyPI
GHSA-hh3j-9m59-p8vcBentoML vulnerable to Uncontrolled Resource Consumption
Modified: 4/15/2025
CRITICAL9.8PyPI
GHSA-hvj5-mvw9-93j3· CVE-2024-2912, PYSEC-2026-296Insecure deserialization in BentoML
Modified: 6/29/2026
HIGH7.5PyPI
GHSA-hw8j-hw49-752c· CVE-2024-9056, PYSEC-2026-1219BentoML Denial of Service (DoS) via Multipart Boundary
Modified: 7/7/2026
HIGH7.8PyPI
GHSA-jfjg-vc52-wqvf· CVE-2026-33744, PYSEC-2026-157BentoML has Dockerfile Command Injection via system_packages in bentofile.yaml
Modified: 6/8/2026
HIGHPyPI
GHSA-m6w7-qv66-g3mf· CVE-2026-27905, PYSEC-2026-2398BentoML Vulnerable to Arbitrary File Write via Symlink Path Traversal in Tar Extraction
Modified: 7/13/2026
MEDIUM5.5PyPI
GHSA-mcfx-4vc6-qgxv· CVE-2026-40610, PYSEC-2026-2399BentoML has Information Disclosure in `bentoml build` via symlink traversal in the build context
Modified: 7/13/2026
CRITICAL9.9PyPI
GHSA-mrmq-3q62-6cc8· CVE-2025-54381, PYSEC-2026-297BentoML SSRF Vulnerability in File Upload Processing
Modified: 9/10/2026
HIGH8.8PyPI
GHSA-v959-cwq9-7hr6· CVE-2026-35044, PYSEC-2026-159BentoML: SSTI via Unsandboxed Jinja2 in Dockerfile Generation
Modified: 6/8/2026
HIGH8.8PyPI
GHSA-w2pm-x38x-jp44· CVE-2026-44346, PYSEC-2026-190Dockerfile command injection via envs[*].name in bentofile.yaml (sibling fix-bypass of CVE-2026-33744 and CVE-2026-35043)
Modified: 6/9/2026