ON
Product
Onnx
12
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 2High 7Medium 3Low 0
Watch
Add Onnx to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-51480 | 8.8 | Jul 22 | Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted… Affected: 1.17.0 |
| CVE-2024-5187 | 8.8 | Jun 6 | A vulnerability in the `download_model_with_test_data` function of the onnx/onnx framework, version 1.16.0, allows for arbitrary file overwrite due to inadequate prevention of… Affected: 1.16.0 |
| CVE-2026-34445 | 8.6 | Apr 1 | ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings. Affected: before 1.21.0 |
| CVE-2026-27489 | 7.5 | Apr 1 | ONNX: Path Traversal via Symlink Affected: before 1.21.0 |
| CVE-2024-27318 | 7.5 | Feb 23 | Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is… Affected: before 1.16.0 |
| CVE-2022-25882 | 7.5 | Jan 26 | Versions of the package onnx before 1.13.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is outside the… Affected: before 1.13.0 |
| CVE-2026-49114 | 7.1 | Aug 21 | ONNX symlink-following and path-traversal arbitrary file write Affected: before 1.21.0 |
Showing 7