https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T21:24:16.525579+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2024-46008 cnvd-2024-46008 2026-10-08T21:24:16.528916+00:00 cnvd-2024-46008 https://cve.radiocsirt.org/vuln/euvd-2026-255105 EUVD-2026-255105 2026-10-08T21:24:16.528957+00:00 EUVD-2026-255105 https://cve.radiocsirt.org/vuln/fkie_cve-2024-9070 fkie_cve-2024-9070 2026-10-08T21:24:16.528971+00:00

A deserialization vulnerability exists in BentoML's runner server in bentoml/bentoml versions <=1.3.4.post1. By setting specific parameters, an attacker can execute unauthorized arbitrary code on the server, causing severe harm. The vulnerability is triggered when the args-number parameter is greater than 1, leading to automatic deserialization and arbitrary code execution.

 https://cve.radiocsirt.org/vuln/ghsa-9g44-gwvm-hc44 GHSA-9g44-gwvm-hc44 — BentoML deserialization vulnerability 2026-10-08T21:24:16.529003+00:00

Affected: PyPI: bentoml

A deserialization vulnerability exists in BentoML's runner server in bentoml/bentoml versions <=1.3.4.post1. By setting specific parameters, an attacker can execute unauthorized arbitrary code on the server, causing severe harm. The vulnerability is triggered when the args-number parameter is greater than 1, leading to automatic deserialization and arbitrary code execution.

 https://cve.radiocsirt.org/vuln/pysec-2026-295 PYSEC-2026-295 — BentoML deserialization vulnerability 2026-10-08T21:24:16.529027+00:00

Affected: PyPI: bentoml

A deserialization vulnerability exists in BentoML's runner server in bentoml/bentoml versions <=1.3.4.post1. By setting specific parameters, an attacker can execute unauthorized arbitrary code on the server, causing severe harm. The vulnerability is triggered when the args-number parameter is greater than 1, leading to automatic deserialization and arbitrary code execution.