TI-2026-80527 CVE-2026-115922 · GHSA-q69g-f4f5-v8m7
Denial of service in ONNX Python APIs via packed tensor expansion
Priority LOW 27
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.
Vulnerabilities
17 records
TI-2026-80526 CVE-2026-115921 · GHSA-m4pr-6v3c-6fgr
Null pointer dereference in ONNX Scan shape inference
Priority LOW 27
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.
TI-2026-80525 CVE-2026-115920 · GHSA-6pwm-x34p-fvj2
Out-of-bounds read in ONNX ConvTranspose shape inference
Priority LOW 27
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.
TI-2026-80524 CVE-2026-115919 · GHSA-48m4-24cq-37qf
Out-of-bounds read in ONNX RNN, GRU and LSTM shape inference
Priority LOW 27
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.
TI-2026-36338 CVE-2026-49114 · GHSA-q56x-g2fj-4rj6
ONNX symlink-following and path-traversal arbitrary file write
Priority MEDIUM 63
In ONNX before 1.21.0, the 'save_external_data' function builds the external-data file path from the model's external_data location field and opens it for writing without 'O_NOFOLLOW/O_EXCL', after a non-atomic 'os.path.…
TI-2026-45276 CVE-2026-63632 · GHSA-p893-rvq9-2xf9
ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape
Priority MEDIUM 49
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.
TI-2026-32442 CVE-2026-44512 · GHSA-hwpq-hmq9-wj77
ONNX: Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)
Priority MEDIUM 58
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.
TI-2026-09778 CVE-2026-11329 · GHSA-h7gg-9w38-vh5g
onnx onnx-mlir Placeholder Node Cache backend.py generate_hash_key weak hash
Priority LOW 9
A vulnerability has been found in onnx onnx-mlir up to 0.5.0.0.
TI-2026-26712 CVE-2026-34447 · GHSA-p433-9wv8-28xj
ONNX: External Data Symlink Traversal
Priority MEDIUM 58
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.
TI-2026-26711 CVE-2026-34446 · GHSA-cmw6-hcpp-c6jp
ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load
Priority LOW 24
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.
TI-2026-21896 CVE-2026-27489 · GHSA-3r9x-f23j-gc73
ONNX: Path Traversal via Symlink
Priority HIGH 77
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.
TI-2026-26710 CVE-2026-34445 · GHSA-538c-55jv-c5g9
ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.
Priority MEDIUM 43
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.
TI-2026-22763 CVE-2026-28500 · GHSA-hqmj-h5c6-369m
ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain Attack
Priority HIGH 78
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.
TI-2024-07209 CVE-2024-7776 · GHSA-h36j-8vv3-cj52
Arbitrary File Overwrite in onnx/onnx
Priority HIGH 74
A vulnerability in the `download_model` function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious ta…
TI-2024-04814 CVE-2024-5187 · GHSA-6rq9-53c3-f7vj
Arbitrary File Overwrite in download_model_with_test_data in onnx/onnx
Priority HIGH 73
A vulnerability in the `download_model_with_test_data` function of the onnx/onnx framework, version 1.16.0, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar file…
TI-2024-18157 CVE-2024-27319 · GHSA-h8wv-9h96-m4hr
Out-of-bounds read in onnx
Priority MEDIUM 40
Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNX_ASSERT and ONNX_ASSERTM functions have an off by one string copy.
TI-2024-18156 CVE-2024-27318 · GHSA-whh8-fjgc-qp73
Path traversal in onnx
Priority MEDIUM 41
Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is outside the model current directory or us…