python3Packages.bentoml

GHSA-6r62-w2q3-48hf high 7.4 BentoML has a Path Traversal via Bentofile Configuration (OSV, for this version)

GHSA-78f9-r8mh-4xm2 high 8.8 public exploit EPSS 0.5% BentoML Dockerfile command injection via docker.base_image (sister of pending GHSA-w2pm-x38x-jp44 / CVE-2026-33744 / CVE-2026-35043) (OSV, for this version)

GHSA-fgv4-6jr3-jgfw high 7.8 public exploit BentoML: Command Injection in cloud deployment setup script (OSV, for this version)

GHSA-jfjg-vc52-wqvf high 7.8 public exploit BentoML has Dockerfile Command Injection via system_packages in bentofile.yaml (OSV, for this version)

GHSA-m6w7-qv66-g3mf high 8.6 public exploit BentoML Vulnerable to Arbitrary File Write via Symlink Path Traversal in Tar Extraction (OSV, for this version)

GHSA-mcfx-4vc6-qgxv medium 5.5 public exploit BentoML has Information Disclosure in `bentoml build` via symlink traversal in the build context (OSV, for this version)

GHSA-v959-cwq9-7hr6 high 8.8 public exploit BentoML: SSTI via Unsandboxed Jinja2 in Dockerfile Generation (OSV, for this version)

GHSA-w2pm-x38x-jp44 high 8.8 public exploit EPSS 0.5% Dockerfile command injection via envs[*].name in bentofile.yaml (sibling fix-bypass of CVE-2026-33744 and CVE-2026-35043) (OSV, for this version)