PYSEC-2026-3747

Reflected XSS in Netron versions =9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution...

PYSEC-2026-3747

Reflected XSS in Netron versions =9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution...

CVE-2026-79720

Reflected XSS in Netron versions =9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution...

openml-pytorch (>=0.1.2, <=0.1.5) potentially affected by CVE-2026-79720 via netron (8.2.0)

netron PYPI version 8.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on netron and may be impacted: - openml-pytorch =0.1.2, =0.1.5 Source cves: CVE-2026-79720 Source advisory: OSV:PYSEC-2026-3747...

openml-pytorch (0.1.6) potentially affected by CVE-2026-79720 via netron (8.9.9)

netron PYPI version 8.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on netron and may be impacted: - openml-pytorch 0.1.6 Source cves: CVE-2026-79720 Source advisory: OSV:PYSEC-2026-3747...

onnx-passes (>=0.2.0, <=0.3.1) potentially affected by CVE-2026-79720 via netron (8.4.0)

netron PYPI version 8.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on netron and may be impacted: - onnx-passes =0.2.0, =0.3.1 Source cves: CVE-2026-79720 Source advisory: OSV:PYSEC-2026-3747...

onnx-passes (>=0.0.0, <=0.1.1) potentially affected by CVE-2026-79720 via netron (8.3.8)

netron PYPI version 8.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on netron and may be impacted: - onnx-passes =0.0.0, =0.1.1 Source cves: CVE-2026-79720 Source advisory: OSV:PYSEC-2026-3747...

finn-plus (1.2.0), finn-plus-notebooks (>=1.3.0, <=1.4.0) potentially affected by CVE-2026-79720 via netron (8.5.0)

netron PYPI version 8.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on netron and may be impacted: - finn-plus 1.2.0 - finn-plus-notebooks =1.3.0, =1.4.0 Source cves: CVE-2026-79720 Source advisory: OSV:PYSEC-2026-3747...

stitchnet (>=0.2.0, <=0.2.2), trt-engine-explorer (>=0.1.0, <=0.1.5) potentially affected by CVE-2026-79720 via netron (7.9.9)

netron PYPI version 7.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on netron and may be impacted: - stitchnet =0.2.0, =0.1.0, =0.1.5 Source cves: CVE-2026-79720 Source advisory: OSV:PYSEC-2026-3747...

PYSEC-2026-4001

Reflected XSS in Netron versions =9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution...

CVE-2026-79718

Reflected XSS in Netron versions =9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution...

PYSEC-2026-4001

Reflected XSS in Netron versions =9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution...

PYSEC-2026-4002

Reflected XSS in Netron versions =9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution...

CVE-2026-79719

Reflected XSS in Netron versions =9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution...

PYSEC-2026-4002

Reflected XSS in Netron versions =9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution...

openml-pytorch (>=0.1.2, <=0.1.5) potentially affected by CVE-2026-79719 via netron (8.2.0)

netron PYPI version 8.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on netron and may be impacted: - openml-pytorch =0.1.2, =0.1.5 Source cves: CVE-2026-79719 Source advisory: OSV:PYSEC-2026-4002...

openml-pytorch (>=0.1.2, <=0.1.5) potentially affected by CVE-2026-79718 via netron (8.2.0)

netron PYPI version 8.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on netron and may be impacted: - openml-pytorch =0.1.2, =0.1.5 Source cves: CVE-2026-79718 Source advisory: OSV:PYSEC-2026-4001...

openml-pytorch (0.1.6) potentially affected by CVE-2026-79718 via netron (8.9.9)

netron PYPI version 8.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on netron and may be impacted: - openml-pytorch 0.1.6 Source cves: CVE-2026-79718 Source advisory: OSV:PYSEC-2026-4001...

openml-pytorch (0.1.6) potentially affected by CVE-2026-79719 via netron (8.9.9)

netron PYPI version 8.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on netron and may be impacted: - openml-pytorch 0.1.6 Source cves: CVE-2026-79719 Source advisory: OSV:PYSEC-2026-4002...

onnx-passes (>=0.2.0, <=0.3.1) potentially affected by CVE-2026-79719 via netron (8.4.0)

netron PYPI version 8.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on netron and may be impacted: - onnx-passes =0.2.0, =0.3.1 Source cves: CVE-2026-79719 Source advisory: OSV:PYSEC-2026-4002...