bentoml vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-44346Highbentoml: Dockerfile command injection via envs[*].name in bentofile.yaml (sibling fix-bypass of…CVE-2026-44345Highbentoml: BentoML Dockerfile command injection via docker.base_image (sister of pending GHSA-w2pm-x38x-jp44 /…CVE-2026-40610Mediumbentoml: BentoML has Information Disclosure in `bentoml build` via symlink traversal in the build context CVE-2026-35044Highbentoml: BentoML: SSTI via Unsandboxed Jinja2 in Dockerfile Generation CVE-2026-35043Highbentoml: BentoML: Command Injection in cloud deployment setup script CVE-2026-33744Highbentoml: BentoML has Dockerfile Command Injection via system_packages in bentofile.yaml CVE-2026-27905Highbentoml: BentoML Vulnerable to Arbitrary File Write via Symlink Path Traversal in Tar Extraction CVE-2026-24123Highbentoml: BentoML has a Path Traversal via Bentofile Configuration CVE-2025-54381Criticalbentoml: BentoML SSRF Vulnerability in File Upload Processing CVE-2025-32375Criticalbentoml: BentoML's runner server Vulnerable to Remote Code Execution (RCE) via Insecure Deserialization CVE-2025-27520Criticalbentoml: BentoML Allows Remote Code Execution (RCE) via Insecure Deserialization CVE-2024-9070Criticalbentoml: BentoML deserialization vulnerability CVE-2024-9056Highbentoml: BentoML Denial of Service (DoS) via Multipart Boundary GHSA-564P-RX2Q-4C8VMediumbentoml: BentoML Open Redirect vulnerability GHSA-HH3J-9M59-P8VCHighbentoml: BentoML vulnerable to Uncontrolled Resource Consumption CVE-2024-2912Criticalbentoml: Insecure deserialization in BentoML

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo