{"action":"Upgrade onnx to 1.21.0 or later.","affected":[{"fixed":"1.21.0","introduced":"0"}],"component":"onnx","cve_ids":["CVE-2026-34445"],"ecosystem":"PyPI","epss":0.00506,"exploited":false,"fixed_versions":["1.21.0"],"ghsa_id":"GHSA-538c-55jv-c5g9","id":"tcs_01M5KEZP52ZNV2Q04JEB2R6P06","modified_at":"2026-09-10T03:50:42.953592147Z","published_at":"2026-04-01T21:10:52Z","references":["https://osv.dev/vulnerability/GHSA-538c-55jv-c5g9","https://github.com/onnx/onnx/security/advisories/GHSA-538c-55jv-c5g9","https://nvd.nist.gov/vuln/detail/CVE-2026-34445","https://github.com/onnx/onnx/pull/7751","https://github.com/onnx/onnx/commit/e30c6935d67cc3eca2fa284e37248e7c0036c46b","https://github.com/onnx/onnx"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-538c-55jv-c5g9","url":"https://osv.dev/vulnerability/GHSA-538c-55jv-c5g9"}],"summary":"ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings."}