tocsin

Debian/onnx: high 8.8

A vulnerability in the `download_model_with_test_data` function of the onnx/onnx framework, version 1.16.0, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks i

Action: Upgrade onnx to 1.16.2-1 or later.

Affected

introducedfixedlast affected
01.16.2-1-

Fixed versions

1.16.2-1

Sources

published · modified · JSON