BentoML (<= 1.4.39)

BentoML versions through 1.4.39 are vulnerable to Dockerfile instruction injection, allowing attackers to execute arbitrary commands during the containerization process by exploiting improper newline handling in template files.