vulnerability in streamlink (CVE-2026-44353). Confidential information can be exposed externally. Exploitable via ``playlist.m3u8``. Mitigation: upgrade to `8.4.0` or later.
OS command injection in bentoml (CVE-2026-44346). Successful exploitation can lead to full system takeover. Exploitable via ``bentofile.yaml``. Mitigation: upgrade to `1.4.39` or later.
OS command injection in bentoml (CVE-2026-44345). Successful exploitation can lead to full system takeover. Exploitable via ``docker.base_image``. Mitigation: upgrade to `1.4.39` or later.
vulnerability in open-webui (CVE-2026-44570). Confidential information can be exposed externally. Exploitable via `POST /api/v1/memories/query`. Mitigation: upgrade to `0.6.19` or later.