Advisories · Technology

BentoML.

Every CVE that names BentoML among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-112264 CVE record

CVSS 8.5 High

BentoML through 1.4.39 Dockerfile Instruction Injection via docker.env Keys
- BentoML
- Command injection
Not analysed yet 19 Oct 2026
CVE-2026-78205 CVE record

CVSS 6.9 Medium

BentoML 1.4.19 through 1.4.39 Server-Side Request Forgery via Unfiltered RFC 6598 Shared Address Space
- BentoML
- Server-side request forgery (SSRF)
Not analysed yet 24 Aug 2026