{"schema_version":1,"title":"onnx (PyPI) vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 15 vulnerabilities in onnx (PyPI): 0 in the last 7 days and 4 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, ONNX TOCTOU race condition in save_external_data, was published on 21 August 2026.","url":"https://junglewise.ai/threats/technologies/onnx","json_url":"https://junglewise.ai/threats/technologies/onnx.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/onnx","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":6,"all_time":15,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":4,"last_365_days":10},"latest":[{"cvss":7.1,"slug":"onnx-toctou-race-condition-in-save-external-data-b85422b8","title":"ONNX TOCTOU race condition in save_external_data","severity":"high","exploited":false,"published_at":"2026-08-21T18:34:56+00:00","url":"https://junglewise.ai/threats/onnx-toctou-race-condition-in-save-external-data-b85422b8"},{"cve":"CVE-2026-49114","cvss":7.1,"epss":0.0016,"slug":"cve-2026-49114-onnx-save-external-data-symlink-following-file-write","title":"ONNX save_external_data symlink-following file write","severity":"high","exploited":false,"published_at":"2026-08-21T16:17:17.863+00:00","url":"https://junglewise.ai/threats/cve-2026-49114-onnx-save-external-data-symlink-following-file-write"},{"cve":"CVE-2026-63632","cvss":3.3,"epss":0.0017,"slug":"cve-2026-63632-onnx-heap-overflow-in-gemm-version-converter-adapter","title":"Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.3.0 until 1.22.0, onnx.version_convert","severity":"low","exploited":false,"published_at":"2026-08-18T15:16:56.463+00:00","url":"https://junglewise.ai/threats/cve-2026-63632-onnx-heap-overflow-in-gemm-version-converter-adapter"},{"cve":"CVE-2026-44512","cvss":5.5,"epss":0.0019,"slug":"cve-2026-44512-onnx-null-pointer-dereference-in-version-converter","title":"ONNX null pointer dereference in version_converter","severity":"medium","exploited":false,"published_at":"2026-07-08T20:16:49.913+00:00","url":"https://junglewise.ai/threats/cve-2026-44512-onnx-null-pointer-dereference-in-version-converter"},{"cvss":7.1,"slug":"onnx-toctou-arbitrary-file-write-in-save-external-data-d7657f94","title":"ONNX TOCTOU arbitrary file write in save_external_data","severity":"high","exploited":false,"published_at":"2026-04-01T23:40:58+00:00","url":"https://junglewise.ai/threats/onnx-toctou-arbitrary-file-write-in-save-external-data-d7657f94"},{"cve":"CVE-2026-34447","cvss":5.5,"epss":0.0019,"slug":"cve-2026-34447-onnx-symlink-traversal-in-external-data-loading","title":"ONNX symlink traversal in external data loading","severity":"medium","exploited":false,"published_at":"2026-04-01T21:14:00+00:00","url":"https://junglewise.ai/threats/cve-2026-34447-onnx-symlink-traversal-in-external-data-loading"},{"cve":"CVE-2026-34446","cvss":3.1,"epss":0.0017,"slug":"cve-2026-34446-onnx-arbitrary-file-read-via-externaldata-hardlink-bypass-in-onnx","title":"PYSEC-2026-2241 - Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, there is an issue in","severity":"low","exploited":false,"published_at":"2026-04-01T18:16:30.66+00:00","url":"https://junglewise.ai/threats/cve-2026-34446-onnx-arbitrary-file-read-via-externaldata-hardlink-bypass-in-onnx"},{"cve":"CVE-2026-34445","cvss":3.1,"epss":0.0051,"slug":"cve-2026-34445-onnx-malicious-onnx-models-can-crash-servers-by-exploiting","title":"PYSEC-2026-2240 - Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, the ExternalDataInfo","severity":"low","exploited":false,"published_at":"2026-04-01T18:16:30.5+00:00","url":"https://junglewise.ai/threats/cve-2026-34445-onnx-malicious-onnx-models-can-crash-servers-by-exploiting"},{"cve":"CVE-2026-27489","cvss":7.5,"epss":0.0062,"slug":"cve-2026-27489-onnx-path-traversal-via-symlink-in-external-data-handling","title":"ONNX path traversal via symlink in external data handling","severity":"high","exploited":false,"published_at":"2026-04-01T18:16:28.287+00:00","url":"https://junglewise.ai/threats/cve-2026-27489-onnx-path-traversal-via-symlink-in-external-data-handling"},{"cve":"CVE-2026-28500","cvss":8.6,"epss":0.0031,"slug":"cve-2026-28500-onnx-security-bypass-in-onnx-hub-load-via-silent-parameter","title":"ONNX security bypass in onnx.hub.load via silent parameter","severity":"high","exploited":false,"published_at":"2026-03-18T02:16:24.227+00:00","url":"https://junglewise.ai/threats/cve-2026-28500-onnx-security-bypass-in-onnx-hub-load-via-silent-parameter"},{"cve":"CVE-2024-7776","cvss":3.1,"epss":0.0152,"slug":"cve-2024-7776-open-neural-network-exchange-onnx-path-traversal-vulnerability","title":"PYSEC-2025-10 - A vulnerability in the `download_model` function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file","severity":"low","exploited":false,"published_at":"2025-03-20T10:15:37+00:00","url":"https://junglewise.ai/threats/cve-2024-7776-open-neural-network-exchange-onnx-path-traversal-vulnerability"},{"cve":"CVE-2024-5187","cvss":8.8,"epss":0.0118,"slug":"cve-2024-5187-onnx-path-traversal-in-download-model-with-test-data","title":"ONNX path traversal in download_model_with_test_data","severity":"high","exploited":false,"published_at":"2024-06-06T21:30:37+00:00","url":"https://junglewise.ai/threats/cve-2024-5187-onnx-path-traversal-in-download-model-with-test-data"},{"cve":"CVE-2024-27319","cvss":3.1,"epss":0.0059,"slug":"cve-2024-27319-onnx-out-of-bounds-read-vulnerability","title":"PYSEC-2024-223 - Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNX_ASSERT and ONNX_ASSERTM functions","severity":"low","exploited":false,"published_at":"2024-02-23T18:15:50+00:00","url":"https://junglewise.ai/threats/cve-2024-27319-onnx-out-of-bounds-read-vulnerability"},{"cve":"CVE-2024-27318","cvss":3.1,"epss":0.0119,"slug":"cve-2024-27318-onnx-directory-traversal-vulnerability","title":"PYSEC-2024-222 - Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Traversal as the external_data field of the tensor prot","severity":"low","exploited":false,"published_at":"2024-02-23T18:15:50+00:00","url":"https://junglewise.ai/threats/cve-2024-27318-onnx-directory-traversal-vulnerability"},{"cve":"CVE-2022-25882","cvss":3.1,"epss":0.0161,"slug":"cve-2022-25882-directory-traversal-in-onnx","title":"PYSEC-2023-38 - Versions of the package onnx before 1.13.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a p","severity":"low","exploited":false,"published_at":"2023-01-26T21:15:00+00:00","url":"https://junglewise.ai/threats/cve-2022-25882-directory-traversal-in-onnx"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"open-webui (PyPI)","slug":"open-webui","vulnerabilities":156,"url":"https://junglewise.ai/threats/technologies/open-webui"},{"name":"nltk (PyPI)","slug":"nltk","vulnerabilities":74,"url":"https://junglewise.ai/threats/technologies/nltk"},{"name":"picklescan (PyPI)","slug":"picklescan","vulnerabilities":74,"url":"https://junglewise.ai/threats/technologies/picklescan"},{"name":"openbabel (PyPI)","slug":"openbabel","vulnerabilities":48,"url":"https://junglewise.ai/threats/technologies/openbabel"},{"name":"apache-superset (PyPI)","slug":"apache-superset","vulnerabilities":44,"url":"https://junglewise.ai/threats/technologies/apache-superset"},{"name":"apache-airflow (PyPI)","slug":"apache-airflow","vulnerabilities":40,"url":"https://junglewise.ai/threats/technologies/apache-airflow"},{"name":"tensorflow-gpu (PyPI)","slug":"tensorflow-gpu","vulnerabilities":37,"url":"https://junglewise.ai/threats/technologies/tensorflow-gpu"},{"name":"tensorflow-cpu (PyPI)","slug":"tensorflow-cpu","vulnerabilities":34,"url":"https://junglewise.ai/threats/technologies/tensorflow-cpu"},{"name":"weblate (PyPI)","slug":"weblate","vulnerabilities":33,"url":"https://junglewise.ai/threats/technologies/weblate"},{"name":"mcp-atlassian (PyPI)","slug":"mcp-atlassian","vulnerabilities":30,"url":"https://junglewise.ai/threats/technologies/mcp-atlassian"},{"name":"crawl4ai (PyPI)","slug":"crawl4ai","vulnerabilities":28,"url":"https://junglewise.ai/threats/technologies/crawl4ai"},{"name":"moin (PyPI)","slug":"moin","vulnerabilities":28,"url":"https://junglewise.ai/threats/technologies/moin"}],"technology":{"hub":true,"name":"onnx (PyPI)","slug":"onnx","vendor":{"name":"PyPI","slug":"pypi","url":"https://junglewise.ai/threats/vendors/pypi"},"aliases":[],"homepage":"https://onnx.ai/","repo_url":"https://github.com/onnx/onnx","description":"An open-source format for representing machine learning models.","url":"https://junglewise.ai/threats/technologies/onnx"},"most_severe":[{"cve":"CVE-2024-5187","cvss":8.8,"epss":0.0118,"slug":"cve-2024-5187-onnx-path-traversal-in-download-model-with-test-data","title":"ONNX path traversal in download_model_with_test_data","severity":"high","exploited":false,"published_at":"2024-06-06T21:30:37+00:00","url":"https://junglewise.ai/threats/cve-2024-5187-onnx-path-traversal-in-download-model-with-test-data"},{"cve":"CVE-2026-28500","cvss":8.6,"epss":0.0031,"slug":"cve-2026-28500-onnx-security-bypass-in-onnx-hub-load-via-silent-parameter","title":"ONNX security bypass in onnx.hub.load via silent parameter","severity":"high","exploited":false,"published_at":"2026-03-18T02:16:24.227+00:00","url":"https://junglewise.ai/threats/cve-2026-28500-onnx-security-bypass-in-onnx-hub-load-via-silent-parameter"},{"cve":"CVE-2026-27489","cvss":7.5,"epss":0.0062,"slug":"cve-2026-27489-onnx-path-traversal-via-symlink-in-external-data-handling","title":"ONNX path traversal via symlink in external data handling","severity":"high","exploited":false,"published_at":"2026-04-01T18:16:28.287+00:00","url":"https://junglewise.ai/threats/cve-2026-27489-onnx-path-traversal-via-symlink-in-external-data-handling"},{"cve":"CVE-2026-49114","cvss":7.1,"epss":0.0016,"slug":"cve-2026-49114-onnx-save-external-data-symlink-following-file-write","title":"ONNX save_external_data symlink-following file write","severity":"high","exploited":false,"published_at":"2026-08-21T16:17:17.863+00:00","url":"https://junglewise.ai/threats/cve-2026-49114-onnx-save-external-data-symlink-following-file-write"},{"cvss":7.1,"slug":"onnx-toctou-race-condition-in-save-external-data-b85422b8","title":"ONNX TOCTOU race condition in save_external_data","severity":"high","exploited":false,"published_at":"2026-08-21T18:34:56+00:00","url":"https://junglewise.ai/threats/onnx-toctou-race-condition-in-save-external-data-b85422b8"},{"cvss":7.1,"slug":"onnx-toctou-arbitrary-file-write-in-save-external-data-d7657f94","title":"ONNX TOCTOU arbitrary file write in save_external_data","severity":"high","exploited":false,"published_at":"2026-04-01T23:40:58+00:00","url":"https://junglewise.ai/threats/onnx-toctou-arbitrary-file-write-in-save-external-data-d7657f94"},{"cve":"CVE-2026-44512","cvss":5.5,"epss":0.0019,"slug":"cve-2026-44512-onnx-null-pointer-dereference-in-version-converter","title":"ONNX null pointer dereference in version_converter","severity":"medium","exploited":false,"published_at":"2026-07-08T20:16:49.913+00:00","url":"https://junglewise.ai/threats/cve-2026-44512-onnx-null-pointer-dereference-in-version-converter"},{"cve":"CVE-2026-34447","cvss":5.5,"epss":0.0019,"slug":"cve-2026-34447-onnx-symlink-traversal-in-external-data-loading","title":"ONNX symlink traversal in external data loading","severity":"medium","exploited":false,"published_at":"2026-04-01T21:14:00+00:00","url":"https://junglewise.ai/threats/cve-2026-34447-onnx-symlink-traversal-in-external-data-loading"},{"cve":"CVE-2026-63632","cvss":3.3,"epss":0.0017,"slug":"cve-2026-63632-onnx-heap-overflow-in-gemm-version-converter-adapter","title":"Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.3.0 until 1.22.0, onnx.version_convert","severity":"low","exploited":false,"published_at":"2026-08-18T15:16:56.463+00:00","url":"https://junglewise.ai/threats/cve-2026-63632-onnx-heap-overflow-in-gemm-version-converter-adapter"},{"cve":"CVE-2022-25882","cvss":3.1,"epss":0.0161,"slug":"cve-2022-25882-directory-traversal-in-onnx","title":"PYSEC-2023-38 - Versions of the package onnx before 1.13.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a p","severity":"low","exploited":false,"published_at":"2023-01-26T21:15:00+00:00","url":"https://junglewise.ai/threats/cve-2022-25882-directory-traversal-in-onnx"}],"generated_at":"2026-09-26T13:07:00.120236+00:00"}