Headline
GHSA-ffxj-547x-5j7c: Directory Traversal in onnx
Versions of the package onnx before 1.13.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is outside the model current directory or user-provided directory, for example “…/…/…/etc/passwd”
Directory Traversal in onnx
High severity GitHub Reviewed Published Jan 26, 2023 to the GitHub Advisory Database • Updated Jan 27, 2023