[Backport release-26.05] openllm, python3Packages.bentoml: mark insecure (#541171)

This commit is contained in:
dotlambda
2026-07-12 20:16:30 +00:00
committed by GitHub
2 changed files with 11 additions and 0 deletions

View File

@@ -64,6 +64,9 @@ python3Packages.buildPythonApplication (finalAttrs: {
description = "Run any open-source LLMs, such as Llama 3.1, Gemma, as OpenAI compatible API endpoint in the cloud";
homepage = "https://github.com/bentoml/OpenLLM";
changelog = "https://github.com/bentoml/OpenLLM/releases/tag/${finalAttrs.src.tag}";
knownVulnerabilities = [
"CVE-2026-15035"
];
license = lib.licenses.asl20;
maintainers = with lib.maintainers; [
happysalada

View File

@@ -248,6 +248,14 @@ buildPythonPackage {
description = "Build Production-Grade AI Applications";
homepage = "https://github.com/bentoml/BentoML";
changelog = "https://github.com/bentoml/BentoML/releases/tag/${src.tag}";
knownVulnerabilities = [
"CVE-2026-27905"
"CVE-2026-33744"
"CVE-2026-35043"
"CVE-2026-35044"
"CVE-2026-44345"
"CVE-2026-44346"
];
license = lib.licenses.asl20;
maintainers = with lib.maintainers; [
happysalada