CVE-2026-34445
2 advisories.
PyPI/onnx CVE-2026-34445: high 8.6
ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.
Action: Upgrade onnx to 1.21.0 or later.
pip install onnx==1.21.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.21.0 | - |
Fixed versions
| 1.21.0 |
Sources
- osv: GHSA-538c-55jv-c5g9
- https://github.com/onnx/onnx/security/advisories/GHSA-538c-55jv-c5g9
- https://nvd.nist.gov/vuln/detail/CVE-2026-34445
- https://github.com/onnx/onnx/pull/7751
- https://github.com/onnx/onnx/commit/e30c6935d67cc3eca2fa284e37248e7c0036c46b
- https://github.com/onnx/onnx
CVE-2026-34445 · published · modified · JSON
PyPI/onnx CVE-2026-34445: high 8.6
Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, the ExternalDataInfo class in ONNX was using Python’s setattr() function to load
Action: Upgrade onnx to 1.21.0 or later.
pip install onnx==1.21.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.21.0 | - |
Fixed versions
| 1.21.0 |
Sources
- osv: PYSEC-2026-2240
- https://github.com/onnx/onnx/commit/e30c6935d67cc3eca2fa284e37248e7c0036c46b
- https://github.com/onnx/onnx/pull/7751
- https://github.com/onnx/onnx/security/advisories/GHSA-538c-55jv-c5g9
CVE-2026-34445 · published · modified · JSON