[ Vendor · 4 CVEs ]
onnx
CVEs affecting onnx published in the last 30 days, plus any onnx CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-115922 | 26 Oct 2026 | CVSS 6.2 | ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIsOpen Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to 1.22.0, _unpack_2bit() and _unpack_4bit()… | Fix |
| CVE-2026-115919 | 26 Oct 2026 | CVSS 6.2 | ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check)Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to 1.22.0, RNNShapeInference_opset1_to_6()… | Fix |
| CVE-2026-115920 | 26 Oct 2026 | CVSS 6.2 | ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rankOpen Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.2.1 until 1.22.0, ConvTranspose shape inference… | Fix |
| CVE-2026-115921 | 26 Oct 2026 | CVSS 6.2 | ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required AttributeOpen Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.4.0 until 1.22.0, ScanInferenceFunction… | Fix |