Onnx vulnerabilities
3 known vulnerabilities in Onnx from Linux Foundation. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Onnx: Improper Limitation of a Pathname to a Restricted Directory
Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted external_data.location paths containing traversal sequences, bypassing intended directory restriction
- 8.8 High severity
onnx/onnx: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in the `download_model_with_test_data` function of the onnx/onnx framework, version 1.16.0, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability enables attackers
- 7.5 High severity
onnx: Improper Limitation of a Pathname to a Restricted Directory
Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is outside the model current directory or user-provided directory. The vulnerability