repository icon
bentoml / bentoml Project repository

The easiest way to serve AI apps and models - Build Model Inference APIs, Job queues, LLM apps, Multi-model pipelines, and more!

Submit a report

FIRST INTERACTION

WITHIN23 DAYS

REVIEW

WITHIN37 DAYS

FIX

WITHIN69 DAYS

The update resulted in the removal of the fix for the deserialization vulnerabil...
coder-sjn
duplicate
Critical
API /summarize interface can cause DOS , which can prevent others from using it...
startr4ck
duplicate
High
Unauthenticated Denial of Service (DoS) via Multipart Boundary in recent integra...
mnqazi
High
•$450•CVE-2024-12759
Open Redirect
mnqazi
Medium
•$75•CVE-2024-12760
Denial of service
oicu0619
duplicate
High
There is a deserialization vulnerability in BentoML's runner server
hexian2001
Critical
•$900•CVE-2024-9070
Denial of Service (DoS) via Multipart Boundary
mnqazi
High
•$450•CVE-2024-9056
CORS and CSRF at /metrics endpoint, revealing the server request log, with endpo...
mnqazi
pending
SSRF in Upload File Request
pruferva
informative
High
RCE By Sending A Single POST Request Via Insecure Deserialization
pinkdraconian
Critical
•$900•CVE-2024-2912
Command execution vulnerability in the bentoml project
bayuncao
not applicable
ReDOS in
lujiefsi
spam
Stored Cross-Site Scripting (XSS) in User Profile Email Notifications
scottie
informative
Medium