Linuxfoundation Onnx vulnerabilities

• linuxfoundation onnx ONNX: Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs) CVE-2026-44512 Fix available 5.5 MediumJuly 7, 2026
• linuxfoundation onnx ONNX symlink-following and path-traversal arbitrary file write CVE-2026-49114 Fix available 6.8 MediumApril 1, 2026
• linuxfoundation onnx ONNX: External Data Symlink Traversal CVE-2026-34447 Fix available 5.5 MediumApril 1, 2026
• linuxfoundation onnx ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load CVE-2026-34446 Fix available 4.7 MediumApril 1, 2026
• linuxfoundation onnx ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings. CVE-2026-34445 Fix available 8.6 HighApril 1, 2026
• linuxfoundation onnx, red hat openshift ai (rhoai), openshift ai 2.25 +2 more ONNX: Path Traversal via Symlink CVE-2026-27489 Fix available 8.7 HighMarch 31, 2026
• linuxfoundation onnx, red hat openshift ai (rhoai), openshift ai 2.25 +2 more ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain Attack CVE-2026-28500 Fix available 8.6 HighMarch 16, 2026
• linuxfoundation onnx Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0... CVE-2025-51480 Fix available 8.8 HighJune 6, 2024
• linuxfoundation onnx, onnx onnx/onnx +1 more Arbitrary File Overwrite in download_model_with_test_data in onnx/onnx CVE-2024-5187 Fix available 8.8 HighJune 6, 2024
• linuxfoundation onnx, fedoraproject fedora +1 more Onnx Out-of-bounds Read vulnerability CVE-2024-27319 Fix available 4.4 MediumFebruary 23, 2024
• linuxfoundation onnx, fedoraproject fedora +1 more Onnx Directory Traversal vulnerability CVE-2024-27318 Fix available 7.5 HighFebruary 23, 2024
• linuxfoundation onnx Directory Traversal in onnx CVE-2022-25882 Fix available 7.5 HighJanuary 25, 2023