Vulnerabilities

Last updated 2 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
onnx onnx Vulnerable to Path Traversal via Symlink High Risk 7.5 7 months ago 8 hours ago
onnx ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check) Medium Risk 6.2 6 days ago 6 days ago
onnx ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute Medium Risk 6.2 6 days ago 6 days ago
onnx ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rank Medium Risk 6.2 6 days ago 6 days ago
onnx ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs Medium Risk 6.2 6 days ago 6 days ago
onnx ONNX: TOCTOU arbitrary file read/write in save_external_dat High Risk 7.1 7 months ago 1 month ago
onnx ONNX: TOCTOU arbitrary file read/write in save_external_dat High Risk 7.1 1 month ago 1 month ago
tract-onnx tract: Arbitrary file read via unsanitized ONNX external_data `location` (path traversal) on model load in tract-onnx Medium Risk 6.1 4 months ago 1 month ago
onnx ONNX: External Data Symlink Traversal Medium Risk 5.5 7 months ago 1 month ago
onnx ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load Medium Risk 4.7 7 months ago 1 month ago
onnx ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings. High Risk 8.6 7 months ago 1 month ago
onnx ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain Attack High Risk 8.6 7 months ago 1 month ago
onnx ONNX has Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs) Medium Risk 5.5 3 months ago 1 month ago
onnx Onnx Out-of-bounds Read vulnerability Medium Risk 4.4 2 years ago 1 month ago
onnx Onnx Directory Traversal vulnerability High Risk 7.5 2 years ago 1 month ago
onnx ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape Low Risk 3.3 3 months ago 3 months ago
onnx ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape Low Risk 3.3 3 months ago 3 months ago
onnx ONNX has Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs) Medium Risk 5.5 3 months ago 3 months ago
onnx No summary available High Risk 7.5 7 months ago 3 months ago
onnx No summary available High Risk 8.6 7 months ago 3 months ago
onnx No summary available Medium Risk 5.5 7 months ago 3 months ago
onnx No summary available Unknown 3 years ago 4 months ago
onnx No summary available High Risk 7.5 2 years ago 4 months ago
onnx No summary available Critical 9.1 2 years ago 4 months ago
onnx No summary available Critical 9.1 1 year ago 4 months ago
onnx onnx allows Arbitrary File Overwrite in download_model_with_test_data High Risk 8.8 2 years ago 5 months ago
onnx No summary available High Risk 8.8 1 year ago 5 months ago
onnx No summary available Critical 9.1 7 months ago 5 months ago
onnx No summary available Medium Risk 5.5 7 months ago 5 months ago
onnxruntime-winml Malicious code in onnxruntime-winml (PyPI) Unknown 1 year ago 11 months ago
quick-start_onnxruntime-node Malicious code in quick-start_onnxruntime-node (npm) Unknown 1 year ago 1 year ago
quick-start_onnxruntime-web-bundler Malicious code in quick-start_onnxruntime-web-bundler (npm) Unknown 1 year ago 1 year ago
onnxruntime-reactnative-example Malicious code in onnxruntime-reactnative-example (npm) Unknown 1 year ago 1 year ago
onnx Directory Traversal in onnx High Risk 7.5 3 years ago 1 year ago
onnx Open Neural Network Exchange (ONNX) Path Traversal Vulnerability High Risk 8.1 1 year ago 1 year ago