BentoMLGHSA-hh3j-9m59-p8vc
BentoML vulnerable to Uncontrolled Resource Consumption
High7.5Published Mar 20, 2025 · updated Apr 15, 2025
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| bentoml PyPI | <= 1.3.9 | No fix yet |
Details and references
In bentoml/bentoml version 1.3.9, the `/login` endpoint of the newly integrated Gradio app is vulnerable to a Denial of Service (DoS) attack. This vulnerability can be exploited by appending characters, such as dashes (-), to the end of a multipart boundary in an HTTP request. The server continuously processes each character, leading to excessive resource consumption and rendering the service unavailable. The issue is unauthenticated and does not require any user interaction.
- CVSS 3.0
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-400
More BentoML advisories
All BentoML| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Mar 202025 | BentoML Open Redirect vulnerability GHSA-564p-rx2q-4c8vMedium6.1no fix yet | Medium6.1 | No fix yet |
| Mar 202025 | BentoML deserialization vulnerability CVE-2024-9070Critical9.8no fix yet | Critical9.8 | No fix yet |
| Mar 202025 | BentoML Denial of Service (DoS) via Multipart Boundary CVE-2024-9056High7.5no fix yet | High7.5 | No fix yet |
| Apr 42025 | BentoML Allows Remote Code Execution (RCE) via Insecure Deserialization CVE-2025-27520Critical9.8fixed in 1.4.3 | Critical9.8 | 1.4.3 |
| Apr 92025 | BentoML's runner server Vulnerable to Remote Code Execution (RCE) via Insecure Deserialization CVE-2025-32375Critical9.8fixed in 1.4.8 | Critical9.8 | 1.4.8 |
| Jul 292025 | BentoML SSRF Vulnerability in File Upload Processing CVE-2025-54381Critical9.9fixed in 1.4.19 | Critical9.9 | 1.4.19 |