bentoml

BentoML: The easiest way to serve AI apps and models

v1.4.38Apache-2.0

172.0K

downloads (30d)

Project Homepage

CRITICAL

BentoML Allows Remote Code Execution (RCE) via Insecure Deserialization

CVE-2025-27520

MODERATE

BentoML Open Redirect vulnerability

HIGH

BentoML has a Path Traversal via Bentofile Configuration

CVE-2026-24123

CRITICAL

BentoML's runner server Vulnerable to Remote Code Execution (RCE) via Insecure Deserialization

CVE-2025-32375 · PYSEC-2025-32

CRITICAL

BentoML deserialization vulnerability

CVE-2024-9070

HIGH

BentoML vulnerable to Uncontrolled Resource Consumption

CRITICAL

Insecure deserialization in BentoML

CVE-2024-2912

HIGH

BentoML Denial of Service (DoS) via Multipart Boundary

CVE-2024-9056

HIGH

BentoML has Dockerfile Command Injection via system_packages in bentofile.yaml

CVE-2026-33744

HIGH

BentoML Vulnerable to Arbitrary File Write via Symlink Path Traversal in Tar Extraction

CVE-2026-27905

CRITICAL

BentoML SSRF Vulnerability in File Upload Processing

CVE-2025-54381

UNKNOWN

PYSEC-2025-32

CVE-2025-32375 · GHSA-7v4r-c989-xh26

Exclude CI/CDPRO

Best Day

11.7K

Mar 10

Worst Day

1.6K

Mar 22

Peaks On

Tues

8.3K avg

Quietest

Suns

2.4K avg

Download Trend

Badge

Markdown

[![PyPI Stats](/api/badges/bentoml?period=month)](/packages/bentoml)

HTML

<a href="/packages/bentoml"><img src="/api/badges/bentoml?period=month" alt="PyPI Stats"></a>

Package Info

Latest Version: 1.4.38
License: Apache-2.0
First Release: 2019-01-15

PyPI Compare