onnx/onnx vulnerabilities

2 known vulnerabilities in onnx/onnx from Onnx. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  onnx/onnx: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-7776Mar 20, 2025OnnxEPSS 1.53%

  A vulnerability in the `download_model` function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability can be explo

• 8.8 High severity

  onnx/onnx: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-5187Jun 6, 2024OnnxEPSS 1.17%

  A vulnerability in the `download_model_with_test_data` function of the onnx/onnx framework, version 1.16.0, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability enables attackers