Approved changes feed: RSS · Atom

cpe:2.3:a:linuxfoundation:onnx:1.17.0:*:*:*:*:*:*:*

part: a version: 1.17.0 update: *

VendorLinuxfoundation (4b459c90-8cdb-5268-beb4-b69b5fe74234)
ProductOnnx (4c7e2fd9-186f-596d-b115-cfb63310e253)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/onnx purl2cpe 2026-06-01 10:13:22.254042
pkg:deb/ubuntu/onnx purl2cpe 2026-06-01 10:13:22.254043
pkg:github/onnx/onnx purl2cpe 2026-06-01 10:13:22.254045
pkg:golang/github.com/onnx/onnx purl2cpe 2026-06-01 10:13:22.254047
pkg:pypi/onnx purl2cpe 2026-06-01 10:13:22.254048
pkg:rpm/opensuse/libonnx purl2cpe 2026-06-01 10:13:22.254050
pkg:sourceforge/onnx.mirror purl2cpe 2026-06-01 10:13:22.254052

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-51480 vulnerable 2026-06-08 07:31:11.209692 Details available
Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted external_data.location paths containing traversal sequences, bypassing intended directory restrictions.
Published: 2025-07-22T00:00:00.000Z
Updated: 2025-07-22T17:47:27.497Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.