MEDIUM6.1
GHSA-564p-rx2q-4c8v
BentoML Open Redirect vulnerability
Details
An open redirect vulnerability in bentoml/bentoml v1.3.9 allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL. This can be exploited for phishing attacks, malware distribution, and credential theft.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI/bentoml
Introduced in:
0No fixed version published yet for bentoml (pip). Pin to a known-safe version or switch to an alternative.