pypi

onnx

31 Total advisories

31 Vulnerabilities

0 Malware

Dependency scanning

Check whether onnx is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

onnx

Vulnerabilities

onnx Vulnerable to Path Traversal via Symlink

ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute

ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check)

ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs

ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rank

ONNX: TOCTOU arbitrary file read/write in save_external_dat

ONNX: TOCTOU arbitrary file read/write in save_external_dat

ONNX: External Data Symlink Traversal

ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load

ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.

ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain Attack

ONNX has Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)

Onnx Out-of-bounds Read vulnerability

Onnx Directory Traversal vulnerability

Duplicate Advisory: ONNX: TOCTOU arbitrary file read/write in save_external_dat

ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape

ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape

ONNX has Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)

CVE-2026-34446

CVE-2026-27489

CVE-2026-34445

CVE-2024-27318

CVE-2024-27319

CVE-2022-25882

CVE-2024-7776

onnx allows Arbitrary File Overwrite in download_model_with_test_data

CVE-2024-5187

CVE-2026-34447

CVE-2026-28500

Directory Traversal in onnx

Open Neural Network Exchange (ONNX) Path Traversal Vulnerability

Browse more PyPI advisories

Start Securing