Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-27489

Опубликовано: 01 апр. 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7.5

Описание

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, a path traversal vulnerability via symlink allows to read arbitrary files outside model or user-provided directory. This issue has been patched in version 1.21.0.

РелизСтатусПримечание
devel

needed

esm-apps/jammy

needed

esm-apps/noble

needed

esm-apps/resolute

needed

jammy

needed

noble

needed

questing

ignored

end of life, was needed
resolute

needed

upstream

needs-triage

Показывать по

Ссылки на источники

EPSS

Процентиль: 45%
0.00593
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 8.6
redhat
5 месяцев назад

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, a path traversal vulnerability via symlink allows to read arbitrary files outside model or user-provided directory. This issue has been patched in version 1.21.0.

CVSS3: 7.5
nvd
5 месяцев назад

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, a path traversal vulnerability via symlink allows to read arbitrary files outside model or user-provided directory. This issue has been patched in version 1.21.0.

CVSS3: 7.5
debian
5 месяцев назад

Open Neural Network Exchange (ONNX) is an open standard for machine le ...

github
5 месяцев назад

onnx Vulnerable to Path Traversal via Symlink

EPSS

Процентиль: 45%
0.00593
Низкий

7.5 High

CVSS3