Vulnerabilities for onnx

First version without a known vulnerability: 1.22.0

Details

• GHSA-p893-rvq9-2xf92026-07-24

  ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape

  Fixed in: 1.22.0

• GHSA-hwpq-hmq9-wj772026-07-07

  ONNX has Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)

  Fixed in: 1.22.0

• GHSA-q56x-g2fj-4rj62026-04-01

  ONNX: TOCTOU arbitrary file read/write in save_external_dat

  Fixed in: 1.21.0

• GHSA-p433-9wv8-28xj2026-04-01

  ONNX: External Data Symlink Traversal

  Fixed in: 1.21.0

• GHSA-cmw6-hcpp-c6jp2026-04-01

  ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load

  Fixed in: 1.21.0

• GHSA-538c-55jv-c5g92026-04-01

  ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.

  Fixed in: 1.21.0

• GHSA-3r9x-f23j-gc732026-03-31

  onnx Vulnerable to Path Traversal via Symlink

  Fixed in: 1.21.0

• GHSA-hqmj-h5c6-369m2026-03-16

  ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain Attack

  Fixed in: 1.21.0rc1

• GHSA-h36j-8vv3-cj522025-03-20

  Open Neural Network Exchange (ONNX) Path Traversal Vulnerability

  Fixed in: 1.17.0, 1.16.2

• GHSA-6rq9-53c3-f7vj2024-06-06

  onnx allows Arbitrary File Overwrite in download_model_with_test_data

  Fixed in: 1.16.2

• GHSA-h8wv-9h96-m4hr2024-02-23

  Onnx Out-of-bounds Read vulnerability

  Fixed in: 1.16.0, 08a399ba75a805b7813ab8936b91d0e274b08287

• GHSA-whh8-fjgc-qp732024-02-23

  Onnx Directory Traversal vulnerability

  Fixed in: 1.16.0, 66b7fb630903fdcf3e83b6b6d56d82e904264a20

• GHSA-ffxj-547x-5j7c2023-01-26

  Directory Traversal in onnx

  Fixed in: 1.13.0, f369b0e859024095d721f1d1612da5a8fa38988d