[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fHDLG5WzIjvD8jlWHpvlDj34BCrnKUWMGDPHPkClyelE":3,"g5a-ex:linuxfoundation\u002Fonnx@*":155,"g5a-family:linuxfoundation\u002Fonnx":157},{"success":4,"data":5},true,{"product":6,"versions":73,"topVulnerabilitiesByEpss":102,"kevVulnerabilities":132,"seoMetadata":133,"meta":152},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":72},"linuxfoundation","onnx",28,5,0,"2025-07-22",[14,17,19,21,23,25,27,29,31,33,35,37,39,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"0.1",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"0.2",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"1.0",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"1.0.1",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.0",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.0",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.1",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.2",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"1.11.0",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.2",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"1.12.0",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"1.13.0",{"version":40,"cve_count":41,"kev_count":11,"has_kev":16},"1.16.0",1,{"version":43,"cve_count":11,"kev_count":11,"has_kev":16},"1.16.1",{"version":45,"cve_count":11,"kev_count":11,"has_kev":16},"1.16.2",{"version":47,"cve_count":41,"kev_count":11,"has_kev":16},"1.17.0",{"version":49,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.1",{"version":51,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.2",{"version":53,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.3",{"version":55,"cve_count":11,"kev_count":11,"has_kev":16},"1.3.0",{"version":57,"cve_count":11,"kev_count":11,"has_kev":16},"1.4.0",{"version":59,"cve_count":11,"kev_count":11,"has_kev":16},"1.4.1",{"version":61,"cve_count":11,"kev_count":11,"has_kev":16},"1.5.0",{"version":63,"cve_count":11,"kev_count":11,"has_kev":16},"1.6.0",{"version":65,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.0",{"version":67,"cve_count":11,"kev_count":11,"has_kev":16},"1.8.0",{"version":69,"cve_count":11,"kev_count":11,"has_kev":16},"1.8.1",{"version":71,"cve_count":11,"kev_count":11,"has_kev":16},"1.9.0","Onnx by Linuxfoundation is a technology product with 28 tracked versions and 5 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":41,"kev_count":11,"has_kev":16},{"version":43,"cve_count":11,"kev_count":11,"has_kev":16},{"version":45,"cve_count":11,"kev_count":11,"has_kev":16},{"version":47,"cve_count":41,"kev_count":11,"has_kev":16},{"version":49,"cve_count":11,"kev_count":11,"has_kev":16},{"version":51,"cve_count":11,"kev_count":11,"has_kev":16},{"version":53,"cve_count":11,"kev_count":11,"has_kev":16},{"version":55,"cve_count":11,"kev_count":11,"has_kev":16},{"version":57,"cve_count":11,"kev_count":11,"has_kev":16},{"version":59,"cve_count":11,"kev_count":11,"has_kev":16},{"version":61,"cve_count":11,"kev_count":11,"has_kev":16},{"version":63,"cve_count":11,"kev_count":11,"has_kev":16},{"version":65,"cve_count":11,"kev_count":11,"has_kev":16},{"version":67,"cve_count":11,"kev_count":11,"has_kev":16},{"version":69,"cve_count":11,"kev_count":11,"has_kev":16},{"version":71,"cve_count":11,"kev_count":11,"has_kev":16},[103,111,116,122,126],{"cveId":104,"description":105,"publishedDate":106,"cvssScore":107,"cvssVersion":108,"severity":109,"isKev":16,"epssScore":110},"CVE-2022-25882","Versions of the package onnx before 1.13.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is outside the model current directory or user-provided directory, for example \"..\u002F..\u002F..\u002Fetc\u002Fpasswd\"","2023-01-26",7.5,"v3.1","High",0.01608,{"cveId":112,"description":113,"publishedDate":114,"cvssScore":107,"cvssVersion":108,"severity":109,"isKev":16,"epssScore":115},"CVE-2024-27318","Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is outside the model current directory or user-provided directory. The vulnerability occurs as a bypass for the patch added for CVE-2022-25882.","2024-02-23",0.01179,{"cveId":117,"description":118,"publishedDate":119,"cvssScore":120,"cvssVersion":108,"severity":109,"isKev":16,"epssScore":121},"CVE-2024-5187","A vulnerability in the `download_model_with_test_data` function of the onnx\u002Fonnx framework, version 1.16.0, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability enables attackers to overwrite any file on the system, potentially leading to remote code execution, deletion of system, personal, or application files, thus impacting the integrity and availability of the system. The issue arises from the function's handling of tar file extraction without performing security checks on the paths within the tar file, as demonstrated by the ability to overwrite the `\u002Fhome\u002Fkali\u002F.ssh\u002Fauthorized_keys` file by specifying an absolute path in the malicious tar file.","2024-06-06",8.8,0.01178,{"cveId":123,"description":124,"publishedDate":12,"cvssScore":120,"cvssVersion":108,"severity":109,"isKev":16,"epssScore":125},"CVE-2025-51480","Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted external_data.location paths containing traversal sequences, bypassing intended directory restrictions.",0.00633,{"cveId":127,"description":128,"publishedDate":114,"cvssScore":129,"cvssVersion":108,"severity":130,"isKev":16,"epssScore":131},"CVE-2024-27319","Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNX_ASSERT and ONNX_ASSERTM functions have an off by one string copy.",4.4,"Medium",0.00589,[],{"title":134,"metaDescription":135,"keywords":136,"structuredData":137},"Onnx by Linuxfoundation - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Onnx by Linuxfoundation covering 28 versions with 5 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Onnx vulnerabilities, Onnx security, Onnx CVE, Linuxfoundation Onnx, Onnx threat intelligence, Linuxfoundation security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":138,"@type":139,"name":140,"description":135,"url":141,"manufacturer":142,"applicationCategory":146,"softwareVersion":147,"mainEntity":148},"https:\u002F\u002Fschema.org","SoftwareApplication","Onnx","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Flinuxfoundation\u002Fonnx",{"@type":143,"name":144,"url":145},"Organization","Linuxfoundation","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Flinuxfoundation","Security Software","28 versions tracked",{"@type":149,"name":150,"description":151,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Onnx Security Vulnerabilities","Security vulnerabilities affecting Onnx by Linuxfoundation",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":153,"apiVersion":154},"2026-10-19T17:53:31.876Z","3.0",{"rows":156,"total":11,"capped":16,"failed":11},[],[]]