10 matches found
Directory Traversal
Overview onnxruntime is a performance-focused scoring engine for Open Neural Network Exchange ONNX models. Affected versions of this package are vulnerable to Directory Traversal due to insufficient validation of external TensorProto data paths. The external data loading path validation did not...
aa-rag (>=0.4.2 <=0.4.3), aana (>=0.2.1 <=0.2.2) +949 more potentially affected by unknown CVE via onnxruntime (>=1.0.0 <=1.24.0.dev20251031003)
onnxruntime PYPI version =1.0.0, =0.4.2, =0.2.1, =0.1.0b1, =0.26.0, =1.0.0, =0.1.0, =0.4.0, =0.1.8, =0.1.0, =0.1.0, =1.0.6, =0.4.0, =0.4.1 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-ONNXRUNTIME-15869956...
MAL-2025-191806 Malicious code in onnxruntime-winml (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 5566aa4ecc644b36e90902092563c05e1852d751381539398f2307ae1fbefae6 Package is just calling home and there is no other purpose --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything th...
Malicious code in onnxruntime-winml (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 5566aa4ecc644b36e90902092563c05e1852d751381539398f2307ae1fbefae6 Package is just calling home and there is no other purpose --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything th...
Malicious code in quick-start_onnxruntime-web-bundler (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41597 Malicious code in quick-start_onnxruntime-web-bundler (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in onnxruntime-reactnative-example (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41587 Malicious code in onnxruntime-reactnative-example (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-31297 Malicious code in quick-start_onnxruntime-node (npm)
The package quick-startonnxruntime-node was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
Malicious code in quick-start_onnxruntime-node (npm)
The package quick-startonnxruntime-node was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...