Threats tagged 'ghsa-9g44-gwvm-hc44'

CVE-2024-9070 is a critical deserialization vulnerability in BentoML's runner server affecting versions up to 1.4.5. The flaw allows an attacker to execute arbitrary code by setting the args-number parameter greater than 1, triggering unsafe deserialization. This can lead to full compromise of the affected server.