Skip to content

BentoML Vulnerable to Arbitrary File Write via Symlink Path Traversal in Tar Extraction

High severity GitHub Reviewed Published Mar 3, 2026 in bentoml/BentoML • Updated Mar 4, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts