HIGHPyPI
GHSA-3r9x-f23j-gc73· CVE-2026-27489, PYSEC-2026-2239onnx Vulnerable to Path Traversal via Symlink
Modified: 7/13/2026
package
PyPI/onnx
pkg:pypi/onnx
HIGH8.6PyPI
GHSA-538c-55jv-c5g9· CVE-2026-34445, PYSEC-2026-2240ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.
Modified: 9/10/2026
HIGH8.8PyPI
GHSA-6rq9-53c3-f7vj· CVE-2024-5187, CVE-2025-51480onnx allows Arbitrary File Overwrite in download_model_with_test_data
Modified: 6/6/2026
MEDIUM4.7PyPI
GHSA-cmw6-hcpp-c6jp· CVE-2026-34446, PYSEC-2026-2241ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load
Modified: 9/10/2026
HIGH7.5PyPI
GHSA-ffxj-547x-5j7c· CVE-2022-25882, PYSEC-2023-38Directory Traversal in onnx
Modified: 4/1/2025
HIGH8.1PyPI
GHSA-h36j-8vv3-cj52· CVE-2024-7776, PYSEC-2025-10Open Neural Network Exchange (ONNX) Path Traversal Vulnerability
Modified: 3/27/2025
MEDIUM4.4PyPI
GHSA-h8wv-9h96-m4hr· CVE-2024-27319, PYSEC-2024-223Onnx Out-of-bounds Read vulnerability
Modified: 9/10/2026
HIGH8.6PyPI
GHSA-hqmj-h5c6-369m· CVE-2026-28500, PYSEC-2026-103ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain Attack
Modified: 9/10/2026
MEDIUM5.5PyPI
GHSA-hwpq-hmq9-wj77· CVE-2026-44512, PYSEC-2026-2689ONNX has Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)
Modified: 9/10/2026
MEDIUM5.5PyPI
GHSA-p433-9wv8-28xj· CVE-2026-34447, PYSEC-2026-104ONNX: External Data Symlink Traversal
Modified: 9/10/2026
LOW3.3PyPI
GHSA-p893-rvq9-2xf9· CVE-2026-63632, PYSEC-2026-3587ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape
Modified: 8/4/2026
HIGH7.1PyPI
GHSA-q56x-g2fj-4rj6· CVE-2026-49114, PYSEC-2026-3876ONNX: TOCTOU arbitrary file read/write in save_external_dat
Modified: 9/10/2026
HIGH7.5PyPI
GHSA-whh8-fjgc-qp73· CVE-2024-27318, PYSEC-2024-222Onnx Directory Traversal vulnerability
Modified: 9/10/2026
—PyPI
PYSEC-2023-38· CVE-2022-25882, GHSA-ffxj-547x-5j7cModified: 6/10/2026
HIGH7.5PyPI
PYSEC-2024-222· CVE-2024-27318, GHSA-whh8-fjgc-qp73Modified: 6/10/2026
CRITICAL9.1PyPI
PYSEC-2024-223· CVE-2024-27319, GHSA-h8wv-9h96-m4hrModified: 6/10/2026
CRITICAL9.1PyPI
PYSEC-2025-10· CVE-2024-7776, GHSA-h36j-8vv3-cj52Modified: 6/10/2026
HIGH8.8PyPI
PYSEC-2025-148· CVE-2024-5187, CVE-2025-51480Modified: 5/21/2026
CRITICAL9.1PyPI
PYSEC-2026-103· CVE-2026-28500, GHSA-hqmj-h5c6-369mModified: 5/20/2026
MEDIUM5.5PyPI
PYSEC-2026-104· CVE-2026-34447, GHSA-p433-9wv8-28xjModified: 5/20/2026
HIGH7.5PyPI
PYSEC-2026-2239· CVE-2026-27489, GHSA-3r9x-f23j-gc73Modified: 7/13/2026
HIGH8.6PyPI
PYSEC-2026-2240· CVE-2026-34445, GHSA-538c-55jv-c5g9Modified: 7/13/2026
MEDIUM5.5PyPI
PYSEC-2026-2241· CVE-2026-34446, GHSA-cmw6-hcpp-c6jpModified: 7/13/2026
MEDIUM5.5PyPI
PYSEC-2026-2689· CVE-2026-44512, GHSA-hwpq-hmq9-wj77ONNX has Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)
Modified: 7/13/2026
LOW3.3PyPI
PYSEC-2026-3587· CVE-2026-63632, GHSA-p893-rvq9-2xf9ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape
Modified: 8/4/2026
HIGH7.1PyPI
PYSEC-2026-3876· CVE-2026-49114, GHSA-q56x-g2fj-4rj6ONNX: TOCTOU arbitrary file read/write in save_external_dat
Modified: 9/10/2026