TR
Product
tract
3
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 3Low 0
Watch
Add tract to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-55093 | 6.1 | Sep 14 | tract-nnef: integer overflow in NNEF `.dat` tensor parser yields an out-of-bounds read on model load Affected: < 0.21.16; >= 0.22.0, < 0.22.2; >= 0.23.0, < 0.23.1 |
| CVE-2026-55832 | 6.1 | Sep 14 | Tract: Arbitrary file read via unsanitized ONNX external_data `location` (path traversal) on model load in tract-onnx Affected: < 0.21.17; >= 0.22.0, < 0.22.3; >= 0.23.0, < 0.23.2 |
| CVE-2026-75093 | 4.3 | Aug 18 | sonos tract ONNX Initializer Loader tensor.rs from_raw_dt_align buffer size Affected: 0.23.0; 0.23.1; 0.23.2; 0.23.3; 0.23.4 |
Showing 3