CRITICAL 9.1 PyPI
PYSEC-2025-10 · CVE-2024-7776, GHSA-h36j-8vv3-cj52 Modified: 3/26/2025
package
PyPI / onnx
pkg:pypi/onnx
HIGH 8.8 PyPI
PYSEC-2025-148 · CVE-2024-5187, CVE-2025-51480 Modified: 5/21/2026
CRITICAL 9.1 PyPI
PYSEC-2026-103 · CVE-2026-28500, GHSA-hqmj-h5c6-369m Modified: 5/20/2026
MEDIUM 5.5 PyPI
PYSEC-2026-104 · CVE-2026-34447, GHSA-p433-9wv8-28xj Modified: 5/20/2026
HIGH PyPI
GHSA-3r9x-f23j-gc73 · CVE-2026-27489 onnx Vulnerable to Path Traversal via Symlink
Modified: 4/6/2026
HIGH 8.6 PyPI
GHSA-538c-55jv-c5g9 · CVE-2026-34445 ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.
Modified: 4/4/2026
HIGH 8.8 PyPI
GHSA-6rq9-53c3-f7vj · CVE-2024-5187, CVE-2025-51480 onnx allows Arbitrary File Overwrite in download_model_with_test_data
Modified: 6/6/2026
MEDIUM 4.7 PyPI
GHSA-cmw6-hcpp-c6jp · CVE-2026-34446 ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load
Modified: 4/4/2026
HIGH 7.5 PyPI
GHSA-ffxj-547x-5j7c · CVE-2022-25882, PYSEC-2023-38 Directory Traversal in onnx
Modified: 4/1/2025
HIGH 8.1 PyPI
GHSA-h36j-8vv3-cj52 · CVE-2024-7776, PYSEC-2025-10 Open Neural Network Exchange (ONNX) Path Traversal Vulnerability
Modified: 3/27/2025
MEDIUM 4.4 PyPI
GHSA-h8wv-9h96-m4hr · CVE-2024-27319, PYSEC-2024-223 Onnx Out-of-bounds Read vulnerability
Modified: 2/4/2026
HIGH 8.6 PyPI
GHSA-hqmj-h5c6-369m · CVE-2026-28500, PYSEC-2026-103 ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain Attack
Modified: 6/8/2026
MEDIUM 5.5 PyPI
GHSA-p433-9wv8-28xj · CVE-2026-34447, PYSEC-2026-104 ONNX: External Data Symlink Traversal
Modified: 6/8/2026
HIGH 7.1 PyPI
GHSA-q56x-g2fj-4rj6 ONNX: TOCTOU arbitrary file read/write in save_external_dat
Modified: 6/8/2026
HIGH 7.5 PyPI
GHSA-whh8-fjgc-qp73 · CVE-2024-27318, PYSEC-2024-222 Onnx Directory Traversal vulnerability
Modified: 2/4/2026
— PyPI
PYSEC-2023-38 · CVE-2022-25882, GHSA-ffxj-547x-5j7c Modified: 11/8/2023
HIGH 7.5 PyPI
PYSEC-2024-222 · CVE-2024-27318, GHSA-whh8-fjgc-qp73 Modified: 1/22/2025
CRITICAL 9.1 PyPI
PYSEC-2024-223 · CVE-2024-27319, GHSA-h8wv-9h96-m4hr Modified: 1/22/2025