{"action":"Upgrade onnx to 1.17.0 or later.","affected":[{"fixed":"1.17.0","introduced":"0"}],"component":"onnx","cve_ids":["CVE-2024-7776"],"ecosystem":"PyPI","epss":0.01532,"exploited":false,"fixed_versions":["1.17.0"],"ghsa_id":"GHSA-h36j-8vv3-cj52","id":"tcs_01M5KFJM2C9H8C927WHEZ7382X","modified_at":"2025-03-27T17:52:58.403634Z","published_at":"2025-03-20T12:32:46Z","references":["https://osv.dev/vulnerability/GHSA-h36j-8vv3-cj52","https://nvd.nist.gov/vuln/detail/CVE-2024-7776","https://github.com/onnx/onnx/pull/6222","https://github.com/onnx/onnx/commit/1b70f9b673259360b6a2339c4bd97db9ea6e552f","https://github.com/onnx/onnx","https://github.com/pypa/advisory-database/tree/main/vulns/onnx/PYSEC-2025-10.yaml","https://huntr.com/bounties/a7a46cf6-1fa0-454b-988c-62d222e83f63"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-h36j-8vv3-cj52","url":"https://osv.dev/vulnerability/GHSA-h36j-8vv3-cj52"}],"summary":"Open Neural Network Exchange (ONNX) Path Traversal Vulnerability"}