Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-34447

Опубликовано: 01 апр. 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 5.5

Описание

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, there is a symlink traversal vulnerability in external data loading allows reading files outside the model directory. This issue has been patched in version 1.21.0.

РелизСтатусПримечание
devel

needed

esm-apps/jammy

needed

esm-apps/noble

needed

esm-apps/resolute

needed

jammy

needed

noble

needed

questing

ignored

end of life, was needed
resolute

needed

upstream

needs-triage

Показывать по

Ссылки на источники

EPSS

Процентиль: 16%
0.00248
Низкий

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
nvd
5 месяцев назад

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, there is a symlink traversal vulnerability in external data loading allows reading files outside the model directory. This issue has been patched in version 1.21.0.

CVSS3: 5.5
debian
5 месяцев назад

Open Neural Network Exchange (ONNX) is an open standard for machine le ...

CVSS3: 5.5
github
5 месяцев назад

ONNX: External Data Symlink Traversal

EPSS

Процентиль: 16%
0.00248
Низкий

5.5 Medium

CVSS3