High
CVE-2026-84452
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 15
Reset filters
High
CVE-2026-49114
ONNX: TOCTOU arbitrary file read/write in save_external_dat
Low
CVE-2026-63632
ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape
Medium
CVE-2026-44512
ONNX has Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)
Medium
CVE-2026-40086
Rembg has a Path Traversal via Custom Model Loading
Medium
CVE-2026-34446
ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load
High
CVE-2026-34445
ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.
Medium
CVE-2026-34447
ONNX: External Data Symlink Traversal
High
CVE-2026-27489
onnx Vulnerable to Path Traversal via Symlink
High
CVE-2026-28500
ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain Attack
High
CVE-2024-5187
onnx allows Arbitrary File Overwrite in download_model_with_test_data
Critical
CVE-2024-7776
A vulnerability in the `download_model` function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal att
High
CVE-2024-27318
Onnx Directory Traversal vulnerability
Medium
CVE-2024-27319
Onnx Out-of-bounds Read vulnerability
High
CVE-2022-25882
Versions of the package onnx before 1.13.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is outside the model current directory
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.