Vulnerabilities
Last updated 2 hours ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
|
|
onnx Vulnerable to Path Traversal via Symlink | High Risk 7.5 | 7 months ago | 8 hours ago |
|
|
ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check) | Medium Risk 6.2 | 6 days ago | 6 days ago |
|
|
ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute | Medium Risk 6.2 | 6 days ago | 6 days ago |
|
|
ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rank | Medium Risk 6.2 | 6 days ago | 6 days ago |
|
|
ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs | Medium Risk 6.2 | 6 days ago | 6 days ago |
|
|
ONNX: TOCTOU arbitrary file read/write in save_external_dat | High Risk 7.1 | 7 months ago | 1 month ago |
|
|
ONNX: TOCTOU arbitrary file read/write in save_external_dat | High Risk 7.1 | 1 month ago | 1 month ago |
tract-onnx
|
tract: Arbitrary file read via unsanitized ONNX external_data `location` (path traversal) on model load in tract-onnx | Medium Risk 6.1 | 4 months ago | 1 month ago |
|
|
ONNX: External Data Symlink Traversal | Medium Risk 5.5 | 7 months ago | 1 month ago |
|
|
ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load | Medium Risk 4.7 | 7 months ago | 1 month ago |
|
|
ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings. | High Risk 8.6 | 7 months ago | 1 month ago |
|
|
ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain Attack | High Risk 8.6 | 7 months ago | 1 month ago |
|
|
ONNX has Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs) | Medium Risk 5.5 | 3 months ago | 1 month ago |
|
|
Onnx Out-of-bounds Read vulnerability | Medium Risk 4.4 | 2 years ago | 1 month ago |
|
|
Onnx Directory Traversal vulnerability | High Risk 7.5 | 2 years ago | 1 month ago |
|
|
ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape | Low Risk 3.3 | 3 months ago | 3 months ago |
|
|
ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape | Low Risk 3.3 | 3 months ago | 3 months ago |
|
|
ONNX has Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs) | Medium Risk 5.5 | 3 months ago | 3 months ago |
|
|
No summary available | High Risk 7.5 | 7 months ago | 3 months ago |
|
|
No summary available | High Risk 8.6 | 7 months ago | 3 months ago |
|
|
No summary available | Medium Risk 5.5 | 7 months ago | 3 months ago |
|
|
No summary available | Unknown | 3 years ago | 4 months ago |
|
|
No summary available | High Risk 7.5 | 2 years ago | 4 months ago |
|
|
No summary available | Critical 9.1 | 2 years ago | 4 months ago |
|
|
No summary available | Critical 9.1 | 1 year ago | 4 months ago |
|
|
onnx allows Arbitrary File Overwrite in download_model_with_test_data | High Risk 8.8 | 2 years ago | 5 months ago |
|
|
No summary available | High Risk 8.8 | 1 year ago | 5 months ago |
|
|
No summary available | Critical 9.1 | 7 months ago | 5 months ago |
|
|
No summary available | Medium Risk 5.5 | 7 months ago | 5 months ago |
|
|
Malicious code in onnxruntime-winml (PyPI) | Unknown | 1 year ago | 11 months ago |
|
|
Malicious code in quick-start_onnxruntime-node (npm) | Unknown | 1 year ago | 1 year ago |
|
|
Malicious code in quick-start_onnxruntime-web-bundler (npm) | Unknown | 1 year ago | 1 year ago |
|
|
Malicious code in onnxruntime-reactnative-example (npm) | Unknown | 1 year ago | 1 year ago |
|
|
Directory Traversal in onnx | High Risk 7.5 | 3 years ago | 1 year ago |
|
|
Open Neural Network Exchange (ONNX) Path Traversal Vulnerability | High Risk 8.1 | 1 year ago | 1 year ago |
Page 1