Skip to content
Tools / BentoML / Security

Security Deep Dive

BentoML

Security posture and CVE patch evidence from tracked releases.

Back to Tool

1 actively-exploited dependency CVE affects v1.4.39.

KEV-listed CVEs are confirmed exploited in the wild — patch urgently.

Versions by Severity

CVEs are attributed to tracked releases published before the patch release.

8 versions tracked
Version Published C H M L KEV Notes
v1.4.39 2026-05-07 — — — — —
Latest Patches CVE-2023-4863
v1.4.38 2026-04-02 — 1 — — KEV 1
—
v1.4.37 2026-03-25 — 1 — — KEV 1
—
v1.4.36 2026-03-06 — 1 — — KEV 1
—
v1.4.35 2026-02-03 — 1 — — KEV 1
—
v1.4.34 2026-01-26 — 1 — — KEV 1
—
v1.4.33 2026-01-12 — 1 — — KEV 1
—
v1.4.32 2026-01-09 — 1 — — KEV 1
—
— Signed — SLSA — SBOM ✓ Security policy Weekly cadence · 13d median Active maintainer

Trust Signals — 3 of 9 Present

Evidence already collected from releases and repository metadata.

3/9 Present
Signed releases Unknown
Latest release artifact signature Latest release
—
SLSA provenance Unknown
Attestation predicate level Latest release
—
SBOM published Unknown
GitHub SBOM API Latest release
—
SECURITY.md Present
GitHub repository metadata Repository policy
Checked: 23d ago
Release cadence: weekly Present
13d median over recent releases Release history
Latest release: 27d ago
Maintainer active Present
Recent commit activity Repository
Last commit: 2d ago
Checksums (SHA256SUMS) Not active yet
SHA256SUMS or equivalent Release asset
Latest release: 27d ago
GitHub Actions attestation Not active yet
actions/attest-build-provenance Workflow file
Latest release: 27d ago
Signing assets Not active yet
.sig, .crt, cosign.pub, or similar Release asset
Latest release: 27d ago
1.1/10 Security Score
6.5/10 Scorecard
Dependency Exposure 231 transitive dependency CVEs found in the latest SBOM. 41 critical.

Security Score

A composite score aggregating Scorecard performance, CVE patch history, OpenSSF badge tier, and dependency vulnerability exposure. Score ≥ 7.0 is healthy; < 4.0 warrants attention.

epss

0.00 / 0.5

Max EPSS 0.933

freshness

1.00 / 1.0

2d stale

scorecard

2.60 / 4.0

Score 6.5/10

cve health

0.00 / 2.5

⚠ No direct scan — 41c/107h transitive CVEs

patch speed

0.50 / 0.5

⚠ Estimated — no CVE patch history

kev exposure

-1.50 / 1.5

KEV exposure detected

supply chain risk

-1.50 / 10.0

Risk 100.0/100

Score breakdown

schema v2

Vulnerability posture

vulnerability posture

0.0

25%

direct cves: clear cve scan: estimated

Release responsiveness

release responsiveness

10.0

5%

patch speed days: no_history

Dependency exposure

dependency exposure

0.0

10%

supply chain risk: 100.0 transitive cves: 41c/107h

Provenance trust

provenance trust

6.5

40%

scorecard score: 6.5 openssf badge: none

Maintainer health

maintainer health

10.0

10%

activity freshness: 2d

Operational risk

operational risk

0.0

10%

kev exposure: detected epss max: 0.933
How is this calculated?

The six dimensions group the legacy score signals into weighted categories: direct vulnerability status, patch responsiveness, dependency exposure, provenance checks, maintainer activity, and exploitability risk. The flat component values above remain available for compatibility.

Supply Chain Risk

Risk 100.0/100
41 Transitive critical CVEs
1 KEV-transitive CVEs
88% Dependency freshness

Scorecard

Scorecard 6.5/10

OpenSSF Scorecard evaluates supply-chain security practices automatically. Score ≥ 6 is passing; ≥ 8 is excellent.

Check Score Reason
Code-Review 5 Found 11/22 approved changesets -- score normalized to 5
Maintained 10 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow 10 no dangerous workflow patterns detected
CII-Best-Practices 0 no effort to earn an OpenSSF best practices badge detected
Security-Policy 10 security policy file detected
Token-Permissions 0 detected GitHub workflow tokens with excessive permissions
License 10 license file detected
Branch-Protection -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases -1 no releases found
Binary-Artifacts 10 no binaries found in the repo
Fuzzing 0 project is not fuzzed
Packaging 10 packaging workflow detected
SAST 9 SAST tool detected but not run on all commits
Pinned-Dependencies 0 dependency not pinned by hash detected -- score normalized to 0

OpenSSF Badge

OpenSSF none

Badge indicates adherence to open-source best practices.

CVE Patch History

Tracks CVEs that were addressed in tagged releases. Shorter gap between disclosure and patch = faster response. EPSS = predicted probability of exploitation in next 30 days (FIRST.org); colored at ≥90%ile and ≥50%ile.

CVEs Patched by Year

Critical High Medium Low
2026
1
CVE Severity EPSS Disclosed Fixed in Days to fix vs Ecosystem Median KEV
CVE-2023-4863 HIGH 99%ile — v1.4.39 — — KEV

KEV = CISA Known Exploited Vulnerabilities catalog — actively exploited in the wild.

Dependency Vulnerabilities

76 dependencies scanned View full dependency list →

Scanning the SBOM (Software Bill of Materials) of the latest release for known vulnerabilities in transitive dependencies.

Critical

41

High

107

Medium

59

Low

16

Unknown

8

1 dependency vulnerabilities are in KEV.

CISA confirmed these vulnerabilities are actively exploited. Treat as critical priority.

Still affecting latest (6) All (231)
Critical 41 High 107 Medium 59 Low 16 Unknown 8
CVE Severity KEV Dependency Affected version Cleared in release
CVE-2014-3007 critical — pillow — v1.4.39
CVE-2016-4009 critical — pillow — v1.4.39
CVE-2019-6446 critical — numpy — v1.4.39
CVE-2020-11538 critical — pillow — v1.4.39
CVE-2020-13092 critical — scikit-learn 0.20.3 v1.4.39
CVE-2020-14343 critical — pyyaml 5.0 v1.4.39
CVE-2020-5310 critical — pillow — v1.4.39
CVE-2020-5311 critical — pillow — v1.4.39
CVE-2020-5312 critical — pillow — v1.4.39
CVE-2021-25289 critical — pillow — v1.4.39
CVE-2021-34552 critical — pillow — v1.4.39
CVE-2021-41945 critical — httpx — v1.4.39
CVE-2022-22817 critical — pillow — v1.4.39
CVE-2022-45907 critical — torch — v1.4.39
CVE-2023-1177 critical — mlflow — v1.4.39
CVE-2023-2780 critical — mlflow — v1.4.39
CVE-2023-3765 critical — mlflow — v1.4.39
CVE-2023-47248 critical — pyarrow — v1.4.39
CVE-2023-50447 critical — pillow — v1.4.39
CVE-2023-6014 critical — mlflow — v1.4.39
CVE-2023-6015 critical — mlflow — v1.4.39
CVE-2023-6018 critical — mlflow — v1.4.39
CVE-2023-6831 critical — mlflow — v1.4.39
CVE-2023-6974 critical — mlflow — v1.4.39
CVE-2023-6975 critical — mlflow — v1.4.39
CVE-2024-0520 critical — mlflow — v1.4.39
CVE-2024-27132 critical — mlflow — v1.4.39
CVE-2024-27133 critical — mlflow — v1.4.39
CVE-2024-2912 critical — bentoml — v1.4.39
CVE-2024-3573 critical — mlflow — v1.4.39
CVE-2024-48063 critical — torch — v1.4.39
CVE-2024-9070 critical — bentoml — v1.4.39
CVE-2025-15036 critical — mlflow — v1.4.39
CVE-2025-15379 critical — mlflow — v1.4.39
CVE-2025-27520 critical — bentoml — v1.4.39
CVE-2025-32375 critical — bentoml — v1.4.39
CVE-2025-32434 critical — torch — v1.4.39
CVE-2025-54381 critical — bentoml — v1.4.39
CVE-2026-0545 critical — mlflow — v1.4.39
CVE-2026-2635 critical — mlflow — v1.4.39
GHSA-83fm-w79m-64r5 critical — mlflow — v1.4.39
CVE-2014-1858 high — numpy — v1.4.39
CVE-2014-1859 high — numpy — v1.4.39
CVE-2014-1932 high — pillow — v1.4.39
CVE-2014-3589 high — pillow — v1.4.39
CVE-2014-3598 high — pillow — v1.4.39
CVE-2014-9601 high — pillow — v1.4.39
CVE-2016-0775 high — pillow — v1.4.39
CVE-2016-2533 high — pillow — v1.4.39
CVE-2016-3076 high — pillow — v1.4.39
CVE-2016-9190 high — pillow — v1.4.39
CVE-2017-12852 high — numpy — v1.4.39
CVE-2019-12408 high — pyarrow — v1.4.39
CVE-2019-12410 high — pyarrow — v1.4.39
CVE-2019-16865 high — pillow — v1.4.39
CVE-2019-18874 high — psutil — v1.4.39
CVE-2019-19911 high — pillow — v1.4.39
CVE-2020-10177 high — pillow — v1.4.39
CVE-2020-10378 high — pillow — v1.4.39
CVE-2020-10379 high — pillow — v1.4.39
CVE-2020-10994 high — pillow — v1.4.39
CVE-2020-35653 high — pillow — v1.4.39
CVE-2020-35654 high — pillow — v1.4.39
CVE-2020-5313 high — pillow — v1.4.39
CVE-2021-23437 high — pillow — v1.4.39
CVE-2021-25287 high — pillow — v1.4.39
CVE-2021-25288 high — pillow — v1.4.39
CVE-2021-25290 high — pillow — v1.4.39
CVE-2021-25291 high — pillow — v1.4.39
CVE-2021-25293 high — pillow — v1.4.39
CVE-2021-27921 high — pillow — v1.4.39
CVE-2021-27922 high — pillow — v1.4.39
CVE-2021-27923 high — pillow — v1.4.39
CVE-2021-28675 high — pillow — v1.4.39
CVE-2021-28676 high — pillow — v1.4.39
CVE-2021-28677 high — pillow — v1.4.39
CVE-2021-32677 high — fastapi — v1.4.39
CVE-2021-41495 high — numpy — v1.4.39
CVE-2022-0736 high — mlflow — v1.4.39
CVE-2022-24303 high — pillow — v1.4.39
CVE-2022-30595 high — pillow — v1.4.39
CVE-2022-39327 high — azure-cli — v1.4.39
CVE-2022-45198 high — pillow — v1.4.39
CVE-2022-45199 high — pillow — v1.4.39
CVE-2023-2356 high — mlflow — v1.4.39
CVE-2023-30172 high — mlflow — v1.4.39
CVE-2023-30798 high — starlette 0.24.0 v1.4.39
CVE-2023-4033 high — mlflow — v1.4.39
CVE-2023-43472 high — mlflow — v1.4.39
CVE-2023-43810 high — opentelemetry-instrumentation — v1.4.39
CVE-2023-44271 high — pillow — v1.4.39
CVE-2023-4863 high KEV pillow — —
CVE-2023-6709 high — mlflow — v1.4.39
CVE-2023-6753 high — mlflow — v1.4.39
CVE-2023-6909 high — mlflow — v1.4.39
CVE-2023-6940 high — mlflow — v1.4.39
CVE-2023-6976 high — mlflow — v1.4.39
CVE-2023-6977 high — mlflow — v1.4.39
CVE-2024-1483 high — mlflow — v1.4.39
CVE-2024-1558 high — mlflow — v1.4.39
CVE-2024-1560 high — mlflow — v1.4.39
CVE-2024-1593 high — mlflow — v1.4.39
CVE-2024-1594 high — mlflow — v1.4.39
CVE-2024-23334 high — aiohttp — v1.4.39
CVE-2024-24762 high — fastapi — v1.4.39
CVE-2024-24762 high — python-multipart — v1.4.39
CVE-2024-27134 high — mlflow — v1.4.39
CVE-2024-28219 high — pillow — v1.4.39
CVE-2024-2928 high — mlflow — v1.4.39
CVE-2024-30251 high — aiohttp — v1.4.39
CVE-2024-31580 high — torch — v1.4.39
CVE-2024-31583 high — torch — v1.4.39
CVE-2024-37052 high — mlflow — v1.4.39
CVE-2024-37053 high — mlflow — v1.4.39
CVE-2024-37054 high — mlflow — v1.4.39
CVE-2024-37055 high — mlflow — v1.4.39
CVE-2024-37056 high — mlflow — v1.4.39
CVE-2024-37057 high — mlflow — v1.4.39
CVE-2024-37058 high — mlflow — v1.4.39
CVE-2024-37059 high — mlflow — v1.4.39
CVE-2024-37060 high — mlflow — v1.4.39
CVE-2024-37061 high — mlflow — v1.4.39
CVE-2024-3848 high — mlflow — v1.4.39
CVE-2024-47874 high — starlette 0.24.0 v1.4.39
CVE-2024-53981 high — python-multipart — v1.4.39
CVE-2024-8859 high — mlflow — v1.4.39
CVE-2024-9056 high — bentoml — v1.4.39
CVE-2025-10279 high — mlflow — v1.4.39
CVE-2025-11200 high — mlflow — v1.4.39
CVE-2025-11201 high — mlflow — v1.4.39
CVE-2025-14279 high — mlflow — v1.4.39
CVE-2025-14287 high — mlflow — v1.4.39
CVE-2025-15031 high — mlflow — v1.4.39
CVE-2025-15381 high — mlflow — v1.4.39
CVE-2025-48379 high — pillow — v1.4.39
CVE-2025-69223 high — aiohttp — v1.4.39
CVE-2026-2033 high — mlflow — v1.4.39
CVE-2026-24123 high — bentoml — v1.4.39
CVE-2026-24486 high — python-multipart — v1.4.39
CVE-2026-25990 high — pillow — v1.4.39
CVE-2026-27905 high — bentoml — v1.4.39
CVE-2026-33744 high — bentoml — v1.4.39
CVE-2026-35043 high — bentoml — v1.4.39
CVE-2026-35044 high — bentoml — v1.4.39
CVE-2026-40192 high — pillow — v1.4.39
CVE-2026-42311 high — pillow — v1.4.39
CVE-2026-42561 high — python-multipart — v1.4.39
GHSA-hh3j-9m59-p8vc high — bentoml — v1.4.39
CVE-2014-1933 medium — pillow — v1.4.39
CVE-2016-0740 medium — pillow — v1.4.39
CVE-2016-9189 medium — pillow — v1.4.39
CVE-2020-35655 medium — pillow — v1.4.39
CVE-2021-25292 medium — pillow — v1.4.39
CVE-2021-28678 medium — pillow — v1.4.39
CVE-2021-33430 medium — numpy — v1.4.39
CVE-2021-34141 medium — numpy — v1.4.39
CVE-2021-41496 medium — numpy — v1.4.39
CVE-2022-22815 medium — pillow — v1.4.39
CVE-2022-22816 medium — pillow — v1.4.39
CVE-2023-1176 medium — mlflow — v1.4.39
CVE-2023-29159 medium — starlette 0.24.0 v1.4.39
CVE-2023-37276 medium — aiohttp — v1.4.39
CVE-2023-47627 medium — aiohttp — v1.4.39
CVE-2023-49081 medium — aiohttp — v1.4.39
CVE-2023-49082 medium — aiohttp — v1.4.39
CVE-2023-6568 medium — mlflow — v1.4.39
CVE-2024-22195 medium — jinja2 3.0.1 v1.4.39
CVE-2024-23829 medium — aiohttp — v1.4.39
CVE-2024-27306 medium — aiohttp — v1.4.39
CVE-2024-3099 medium — mlflow — v1.4.39
CVE-2024-34064 medium — jinja2 3.0.1 v1.4.39
CVE-2024-3772 medium — pydantic 2 v1.4.39
CVE-2024-42367 medium — aiohttp — v1.4.39
CVE-2024-4263 medium — mlflow — v1.4.39
CVE-2024-5206 medium — scikit-learn 0.20.3 v1.4.39
CVE-2024-52303 medium — aiohttp — v1.4.39
CVE-2024-52304 medium — aiohttp — v1.4.39
CVE-2024-56201 medium — jinja2 3.0.1 v1.4.39
CVE-2024-56326 medium — jinja2 3.0.1 v1.4.39
CVE-2024-6838 medium — mlflow — v1.4.39
CVE-2025-0453 medium — mlflow — v1.4.39
CVE-2025-1473 medium — mlflow — v1.4.39
CVE-2025-27516 medium — jinja2 3.0.1 v1.4.39
CVE-2025-3047 medium — aws-sam-cli 0.33.1 v1.4.39
CVE-2025-3048 medium — aws-sam-cli 0.33.1 v1.4.39
CVE-2025-3730 medium — torch — v1.4.39
CVE-2025-52967 medium — mlflow — v1.4.39
CVE-2025-54121 medium — starlette 0.24.0 v1.4.39
CVE-2025-69227 medium — aiohttp — v1.4.39
CVE-2025-69228 medium — aiohttp — v1.4.39
CVE-2025-69229 medium — aiohttp — v1.4.39
CVE-2026-1839 medium — transformers 4.54 v1.4.39
CVE-2026-22815 medium — aiohttp — v1.4.39
CVE-2026-33865 medium — mlflow — v1.4.39
CVE-2026-33866 medium — mlflow — v1.4.39
CVE-2026-34515 medium — aiohttp — v1.4.39
CVE-2026-34516 medium — aiohttp — v1.4.39
CVE-2026-34525 medium — aiohttp — v1.4.39
CVE-2026-40347 medium — python-multipart — v1.4.39
CVE-2026-40610 medium — bentoml — v1.4.39
CVE-2026-42308 medium — pillow — v1.4.39
CVE-2026-42309 medium — pillow — v1.4.39
CVE-2026-42310 medium — pillow — v1.4.39
GHSA-564p-rx2q-4c8v medium — bentoml — v1.4.39
GHSA-jgpv-4h4c-xhw3 medium — pillow — v1.4.39
GHSA-pjjw-qhg8-p2p9 medium — aiohttp — v1.4.39
GHSA-rjc6-vm4h-85cg medium — aws-sam-cli 0.33.1 v1.4.39
CVE-2021-21330 low — aiohttp — v1.4.39
CVE-2023-47641 low — aiohttp — v1.4.39
CVE-2025-1474 low — mlflow — v1.4.39
CVE-2025-2953 low — torch — v1.4.39
CVE-2025-53643 low — aiohttp — v1.4.39
CVE-2025-69224 low — aiohttp — v1.4.39
CVE-2025-69225 low — aiohttp — v1.4.39
CVE-2025-69226 low — aiohttp — v1.4.39
CVE-2025-69230 low — aiohttp — v1.4.39
CVE-2026-34513 low — aiohttp — v1.4.39
CVE-2026-34514 low — aiohttp — v1.4.39
CVE-2026-34517 low — aiohttp — v1.4.39
CVE-2026-34518 low — aiohttp — v1.4.39
CVE-2026-34519 low — aiohttp — v1.4.39
CVE-2026-34520 low — aiohttp — v1.4.39
GHSA-4fx9-vc88-q2xc low — pillow — v1.4.39
CVE-2017-18342 unknown — pyyaml 5.0 v1.4.39
CVE-2020-13091 unknown — pandas — v1.4.39
CVE-2020-28975 unknown — scikit-learn 0.20.3 v1.4.39
CVE-2024-31584 unknown — torch — v1.4.39
CVE-2024-52338 unknown — pyarrow — v1.4.39
OSV-2022-1074 unknown — pillow — v1.4.39
OSV-2022-715 unknown — pillow — v1.4.39
PYSEC-2023-175 unknown — pillow — v1.4.39

Showing 231 of 231

Beta — feedback welcome: [email protected]