PyPI/onnx CVE-2026-34447: medium 5.5, EPSS 0.26%

ONNX: External Data Symlink Traversal

Action: Upgrade onnx to 1.21.0 or later.

pip install onnx==1.21.0

Affected

Fixed versions

Sources

• osv: GHSA-p433-9wv8-28xj
• https://github.com/onnx/onnx/security/advisories/GHSA-p433-9wv8-28xj
• https://nvd.nist.gov/vuln/detail/CVE-2026-34447
• https://github.com/onnx/onnx
• https://github.com/pypa/advisory-database/tree/main/vulns/onnx/PYSEC-2026-104.yaml

CVE-2026-34447 · published 2026-04-01T21:14:00Z · modified 2026-09-10T03:50:44.812731283Z · JSON