Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-ffxj-547x-5j7c: Directory Traversal in onnx

Versions of the package onnx before 1.13.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is outside the model current directory or user-provided directory, for example “…/…/…/etc/passwd”

ghsa
#git

Directory Traversal in onnx

High severity GitHub Reviewed Published Jan 26, 2023 to the GitHub Advisory Database • Updated Jan 27, 2023

ghsa: Latest News

GHSA-p85q-mww9-gwqf: Citizen Short Description stored XSS vulnerability through wikitext