Vulnerabilidades em ONNX
13 resultadosAnálise Vexday
O ONNX apresenta um perfil de risco mínimo com apenas 1 vulnerabilidade catalogada na base, sem exploração ativa identificada (KEV). A fraqueza detectada é Path Traversal (CWE-22), publicada recentemente (últimos 90 dias), mas sem severidade crítica — recomenda-se monitoramento de rotina sem urgência operacional.
CVE-2024-7776HIGHArbitrary File Overwrite in onnx/onnxEPSS 1.5%CVE-2024-27318HIGHVersions of the package onnx before and including 1.15.0 are vulnerable to Directory Traversal as the external_data field of the tensor protEPSS 1.2%CVE-2024-5187HIGHArbitrary File Overwrite in download_model_with_test_data in onnx/onnxEPSS 1.2%CVE-2024-27319MEDIUMVersions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNX_ASSERT and ONNX_ASSERTM functions EPSS 0.6%CVE-2026-27489HIGHONNX: Path Traversal via SymlinkEPSS 0.6%CVE-2026-28500HIGHONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain AttackEPSS 0.3%CVE-2026-34445HIGHONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.EPSS 0.3%CVE-2026-34447MEDIUMONNX: External Data Symlink TraversalEPSS 0.2%CVE-2026-44512MEDIUMONNX: Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)EPSS 0.2%CVE-2026-34446MEDIUMONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX loadEPSS 0.2%CVE-2026-63632LOWONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input ShapeEPSS 0.2%CVE-2026-49114MEDIUMONNX symlink-following and path-traversal arbitrary file writeEPSS 0.1%CVE-2026-11329LOWonnx onnx-mlir Placeholder Node Cache backend.py generate_hash_key weak hashEPSS 0.1%