PyPI/onnx CVE-2024-7776: high 8.1, EPSS 1.53%

Open Neural Network Exchange (ONNX) Path Traversal Vulnerability

Action: Upgrade onnx to 1.17.0 or later.

pip install onnx==1.17.0

Affected

Fixed versions

Sources

• osv: GHSA-h36j-8vv3-cj52
• https://nvd.nist.gov/vuln/detail/CVE-2024-7776
• https://github.com/onnx/onnx/pull/6222
• https://github.com/onnx/onnx/commit/1b70f9b673259360b6a2339c4bd97db9ea6e552f
• https://github.com/onnx/onnx
• https://github.com/pypa/advisory-database/tree/main/vulns/onnx/PYSEC-2025-10.yaml
• https://huntr.com/bounties/a7a46cf6-1fa0-454b-988c-62d222e83f63

CVE-2024-7776 · published 2025-03-20T12:32:46Z · modified 2025-03-27T17:52:58.403634Z · JSON