CVE-2026-49114
2 advisories.
PyPI/onnx CVE-2026-49114: high 7.1
ONNX: TOCTOU arbitrary file read/write in save_external_dat
Action: Upgrade onnx to 1.21.0 or later.
pip install onnx==1.21.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.21.0 | - |
Fixed versions
| 1.21.0 |
Sources
- osv: GHSA-q56x-g2fj-4rj6
- https://github.com/onnx/onnx/security/advisories/GHSA-q56x-g2fj-4rj6
- https://nvd.nist.gov/vuln/detail/CVE-2026-49114
- https://github.com/onnx/onnx
- https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-233-01.json
CVE-2026-49114 · published · modified · JSON
PyPI/onnx CVE-2026-49114: high 7.1
ONNX: TOCTOU arbitrary file read/write in save_external_dat
Action: Upgrade onnx to 1.21.0 or later.
pip install onnx==1.21.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.21.0 | - |
Fixed versions
| 1.21.0 |
Sources
- osv: PYSEC-2026-3876
- https://github.com/onnx/onnx/security/advisories/GHSA-q56x-g2fj-4rj6
- https://nvd.nist.gov/vuln/detail/CVE-2026-49114
- https://github.com/onnx/onnx
- https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-233-01.json
- https://pypi.org/project/onnx
- https://github.com/advisories/GHSA-q56x-g2fj-4rj6
CVE-2026-49114 · published · modified · JSON