ON
Product
onnx
14
CVEs
0
On KEV
9.1
Max CVSS
4
New 30D
Severity mix
Critical 2High 3Medium 8Low 1
Watch
Add onnx to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-115922 New | 6.2 | Oct 26 | ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs Affected: < 1.22.0 |
| CVE-2026-115921 New | 6.2 | Oct 26 | ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute Affected: >= 1.4.0, < 1.22.0 |
| CVE-2026-115920 New | 6.2 | Oct 26 | ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rank Affected: >= 1.2.1, < 1.22.0 |
| CVE-2026-115919 New | 6.2 | Oct 26 | ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check) Affected: < 1.22.0 |
| CVE-2026-44512 | 5.5 | Jul 8 | ONNX: Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs) Affected: >= 1.9.0, < 1.22.0 |
| CVE-2026-34447 | 5.5 | Apr 1 | ONNX: External Data Symlink Traversal Affected: < 1.21.0 |
| CVE-2026-34446 | 5.5 | Apr 1 | ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load Affected: < 1.21.0 |
| CVE-2026-14647 | 4.3 | Jul 4 | onnx onnxruntime old.cc convPoolShapeInference_opset19 out-of-bounds Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +16 more |
Showing 8