tocsin

Debian/onnx: critical 9.1

A vulnerability in the `download_model` function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal att

Action: Upgrade onnx to 1.16.2-1 or later.

Affected

introducedfixedlast affected
01.16.2-1-

Fixed versions

1.16.2-1

Sources

published · modified · JSON