bento

Este software es experimental pero aceptamos sugerencias y contribuciones Bento Toolkit para PT y CTF Un bento 弁当, bentō es una comida para llevar o empaquetada en casa de una sola porción de origen japonés. Bento Toolkit es un contenedor Docker simple y mínimo para testers de penetración y...

GO-2026-6222 vulnerabilities

Vulnerabilities for packages: mailpit-fips, bento-fips, fortio-fips, ollama-fips, seaweedfs-fips, pdfcpu, kubescape-server, gitea-fips, bento, gitea, seaweedfs, fortio, ollama, kitty, nemo, seaweedfs-operator-fips, mattermost, mattermost-fips, seaweedfs-rocksdb-fips, kubescape, mailpit,...

GO-2026-6222 vulnerabilities

Vulnerabilities for packages: mattermost, mailpit, seaweedfs, kitty, ollama, bento, pdfcpu, kubescape, rclone, gitea...

CVE-2026-46603 vulnerabilities

Vulnerabilities for packages: mattermost, mailpit, seaweedfs, kitty, ollama, bento, pdfcpu, kubescape, rclone, gitea...

GO-2026-4518 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, teleport, grafana-alloy-fips, steampipe, splunk-otel-collector-fips, bento-fips, kots, grafana-alloy, telegraf, bento...

GO-2026-5410 vulnerabilities

Vulnerabilities for packages: argo-cd-fips, peerdb-flow, argo-rollouts-fips, bento-fips, bento, argo-cd, kubernetes-event-exporter, kyverno-policy-reporter-fips, argo-rollouts, kyverno-policy-reporter, atlantis, atlantis-fips, kubernetes-event-exporter-fips, argo-events-fips, goreleaser, kubewatc...

GO-2025-4173 vulnerabilities

Vulnerabilities for packages: dapr-fips, minio, telegraf, beats-fips, dapr, beats, elastic-agent-fips, agentbeat-fips, falcosidekick-fips, zabbix-agent2, elastic-agent, falcosidekick, influxd, bento, agentbeat, minio-fips, zabbix-agent2-fips...

GO-2025-4173 vulnerabilities

Vulnerabilities for packages: falcosidekick, bento, minio...

GO-2026-5061 vulnerabilities

Vulnerabilities for packages: mattermost, mailpit, seaweedfs, ollama, bento, pdfcpu, kubescape, rclone, gitea...

GO-2026-4518 vulnerabilities

Vulnerabilities for packages: telegraf, splunk-otel-collector, bento, kots, steampipe, grafana-alloy...

GO-2026-4961 vulnerabilities

Vulnerabilities for packages: mattermost, seaweedfs, ollama, bento, pdfcpu, kubescape, rclone, gitea...

GO-2026-5410 vulnerabilities

Vulnerabilities for packages: atlantis, argo-rollouts, argo-cd, kubewatch, kyverno-policy-reporter, goreleaser, argo-events, bento, kubernetes-event-exporter...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: cluster-api-aws-controller, sqlexporter, amazon-cloudwatch-agent, jitsucom-bulker, argo-events, splunk-otel-collector, bento, grafana-alloy, opentelemetry-collector-contrib...

PYSEC-2026-1218 BentoML has a Path Traversal via Bentofile Configuration

Summary BentoML's bentofile.yaml configuration allows path traversal attacks through multiple file path fields description, docker.setupscript, docker.dockerfiletemplate, conda.environmentyml. An attacker can craft a malicious bentofile that, when built by a victim, exfiltrates arbitrary files fr...

CVE-2026-41653

BentoPDF is a client-side PDF toolkit that is self hostable. Prior to version 2.8.3, a cross-site scripting vulnerability was identified in BentoPD. An attacker may be able to execute arbitrary JavaScript in certain circumstances in Markdown to PDF Tool. This issue has been patched in version 2.8...

PYSEC-2026-190

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.39, a malicious bentofile.yaml containing a newline-injected value in envs.name produces unquoted RUN directives in the BentoML-generated Dockerfile. When the victim runs bentom...

PYSEC-2026-189

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.39, src/bentoml/internal/container/frontend/dockerfile/templates/basev2.j2 interpolates docker.baseimage raw with no escaping, newline filtering, or validation. A malicious...

CVE-2026-44345 BentoML: Dockerfile command injection via docker.base_image

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.39, src/bentoml/internal/container/frontend/dockerfile/templates/basev2.j2 interpolates docker.baseimage raw with no escaping, newline filtering, or validation. A malicious...

EUVD-2026-32609

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.39, a malicious bentofile.yaml containing a newline-injected value in envs.name produces unquoted RUN directives in the BentoML-generated Dockerfile. When the victim runs bentom...

PT-2026-45980

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.39, a malicious bentofile.yaml containing a newline-injected value in envs.name produces unquoted RUN directives in the BentoML-generated Dockerfile. When the victim runs bentom...