Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability

Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNX_ASSERT and ONNX_ASSERTM functions have an off by one string copy

Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted…

A vulnerability in the `download_model_with_test_data` function of the onnx/onnx framework, version 1.16.0, allows for arbitrary file overwrite due to inadequate prevention of…

ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.

ONNX: Path Traversal via Symlink

Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is…

Versions of the package onnx before 1.13.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is outside the…

ONNX symlink-following and path-traversal arbitrary file write

ONNX: Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)

ONNX: External Data Symlink Traversal

ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load