bentoml@0.7.0 vulnerabilities

BentoML: The easiest way to serve AI apps and models

Known vulnerabilities in the bentoml package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
C Insecure Deserialization bentoml is a BentoML: Build Production-Grade AI Applications Affected versions of this package are vulnerable to Insecure Deserialization due to sending a single `POST` request to any valid endpoint. An attacker can execute arbitrary commands on the server. How to fix Insecure Deserialization? Upgrade `bentoml` to version 1.2.5 or higher.	[,1.2.5)