{"action":"Upgrade bentoml to 1.4.19 or later.","affected":[{"fixed":"1.4.19","introduced":"1.4.0"}],"component":"bentoml","cve_ids":["CVE-2025-54381"],"ecosystem":"PyPI","epss":0.13177,"exploited":false,"fixed_versions":["1.4.19"],"ghsa_id":"GHSA-mrmq-3q62-6cc8","id":"tcs_01M5KFRN9YJBVVKSMD2A16YZ8M","modified_at":"2026-09-10T03:50:57.932414019Z","published_at":"2025-07-29T19:24:47Z","references":["https://osv.dev/vulnerability/GHSA-mrmq-3q62-6cc8","https://github.com/bentoml/BentoML/security/advisories/GHSA-mrmq-3q62-6cc8","https://nvd.nist.gov/vuln/detail/CVE-2025-54381","https://github.com/bentoml/BentoML/commit/534c3584621da4ab954bdc3d814cc66b95ae5fb8","https://github.com/bentoml/BentoML"],"severity":{"label":"critical","score":9.9},"sources":[{"source":"osv","source_id":"GHSA-mrmq-3q62-6cc8","url":"https://osv.dev/vulnerability/GHSA-mrmq-3q62-6cc8"}],"summary":"BentoML SSRF Vulnerability in File Upload Processing"}