bentoutils (>=0.0.35, <=0.1.1), qandaxfmrartifact (>=0.0.6, <=0.0.7) +3 more potentially affected by CVE-2024-2912 via bentoml (0.10.1)

bentoml PYPI version 0.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on bentoml and may be impacted: - bentoutils =0.0.35, =0.0.6, =0.0.5, =0.0.3, =0.0.4 Source cves: CVE-2024-2912 Source advisory: OSV:PYSEC-2026-296...

bentoutils (0.0.10), ersilia (>=0.0.1, <=0.0.3) +3 more potentially affected by CVE-2024-2912 via bentoml (0.9.2)

bentoml PYPI version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on bentoml and may be impacted: - bentoutils 0.0.10 - ersilia =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.2 Source cves: CVE-2024-2912 Source advisory: OSV:PYSEC-2026-296...

ersilia (>=0.0.5, <=0.1.1) potentially affected by CVE-2024-2912 via bentoml (0.11.0)

bentoml PYPI version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on bentoml and may be impacted: - ersilia =0.0.5, =0.1.1 Source cves: CVE-2024-2912 Source advisory: OSV:PYSEC-2026-296...

bentoctl (0.2.3), bentoutils (>=1.0.1, <=1.1.0) +4 more potentially affected by CVE-2024-2912 via bentoml (>=1.0.0a7, <=1.1.11)

bentoml PYPI version =1.0.0a7, =1.0.1, =0.0.1, =1.0.3, =0.0.10, =0.4.44 - raptor-labsdk 0.3.2 Source cves: CVE-2024-2912 Source advisory: OSV:PYSEC-2026-296...

CVE-2024-2912

An insecure deserialization vulnerability exists in the BentoML framework, allowing remote code execution RCE by sending a specially crafted POST request. By exploiting this vulnerability, attackers can execute arbitrary commands on the server hosting the BentoML application. The vulnerability is...

bentoctl (0.2.3), bentoutils (>=1.0.1, <=1.1.0) +4 more potentially affected by CVE-2024-2912 via bentoml (>=1.0.0a7, <=1.1.11)

bentoml PYPI version =1.0.0a7, =1.0.1, =0.0.1, =1.0.3, =0.0.10, =0.4.44 - raptor-labsdk 0.3.2 Source cves: CVE-2024-2912 Source advisory: GHSA-HVJ5-MVW9-93J3...

CVE-2024-2912 Insecure Deserialization Leading to RCE in bentoml/bentoml

An insecure deserialization vulnerability exists in the BentoML framework, allowing remote code execution RCE by sending a specially crafted POST request. By exploiting this vulnerability, attackers can execute arbitrary commands on the server hosting the BentoML application. The vulnerability is...

bento2seldon (>=0.1.0, <=0.4.0), bento2seldon4recsys (>=0.1.0, <=0.1.3) +14 more potentially affected by CVE-2024-2912 via bentoml (>=0.9.2, <=1.1.11)

bentoml PYPI version =0.9.2, =0.1.0, =0.1.0, =0.0.10, =0.0.1, =0.0.1, =1.0.3, =0.0.10, =0.0.1, =0.0.1, =0.0.1, =0.0.4 and more Source cves: CVE-2024-2912 Source advisory: MEND:CVE-2024-2912...

CVE-2024-2912 Insecure Deserialization Leading to RCE in bentoml/bentoml

An insecure deserialization vulnerability exists in the BentoML framework, allowing remote code execution RCE by sending a specially crafted POST request. By exploiting this vulnerability, attackers can execute arbitrary commands on the server hosting the BentoML application. The vulnerability is...