repository icon
bentoml / openllm Project repository

Run any open-source LLMs, such as Llama, Mistral, as OpenAI compatible API endpoint in the cloud.

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN21 DAYS

FIX

WITHINN/A DAYS

Arbitrary file write via path traversal in model alias handling during `openllm...
hiyokosauna37
duplicate
Medium
Unsafe deserialization via torch.load and pickle in OpenLLM model loading
etwithin
pending
OS Command Injection via create_subprocess_shell in async_run_command()
apeiria-zero
pending
Arbitrary File Write via Path Traversal in _complete_alias() (repo.py)
apeiria-zero
duplicate
Medium
Arbitrary File Read (Error-Based LFI) via Path Traversal in Model Tag Parsing
unicuervo16
pending
Arbitrary File Write via Path Traversal in Alias Label Processing
pavanchow
pending
Openllm has a deserialization vulnerability that can lead to RCE.
coder-sjn
pending
Local File Inclusion
srivallikusumba
Medium
•$125•CVE-2024-8982
eval() function code injection in bentoml/openllm
vanirxxx
informative
Critical