Attackers can inject malicious RUN commands into Docker builds via crafted YAML files, risking secret exposure and image tampering in BentoML environments.
Attackers can execute arbitrary shell commands in Stills versions before 25.24.2 by naming media files with special characters that trigger command execution.
