PyPI/onnx CVE-2026-34445: high 8.6, EPSS 0.51%

ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.

Action: Upgrade onnx to 1.21.0 or later.

pip install onnx==1.21.0

Affected

Fixed versions

Sources

• osv: GHSA-538c-55jv-c5g9
• https://github.com/onnx/onnx/security/advisories/GHSA-538c-55jv-c5g9
• https://nvd.nist.gov/vuln/detail/CVE-2026-34445
• https://github.com/onnx/onnx/pull/7751
• https://github.com/onnx/onnx/commit/e30c6935d67cc3eca2fa284e37248e7c0036c46b
• https://github.com/onnx/onnx

CVE-2026-34445 · published 2026-04-01T21:10:52Z · modified 2026-09-10T03:50:42.953592147Z · JSON