Approved changes feed: RSS · Atom
cpe:2.3:a:onnx:onnx-mlir:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Onnx (572b048b-1add-5b4c-b1e8-bae6177bcd80) |
|---|---|
| Product | Onnx Mlir (e89a9bcb-2067-503a-a696-8b71763d9822) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-11329 |
vulnerable | 2026-06-08 07:47:14.105675 |
onnx onnx-mlir Placeholder Node Cache backend.py generate_hash_key weak hash
LOW (3.6)
A vulnerability has been found in onnx onnx-mlir up to 0.5.0.0. Affected by this issue is the function generate_hash_key of the file src/Runtime/python/torch_onnxmlir/src/torch_onnxmlir/backend.py of the component Placeholder Node Cache Handler. Such manipulation leads to use of weak hash. An attack has to be approached locally. A high complexity level is associated with this attack. The exploitation is known to be difficult. The name of the patch is 72c5187ff6d13c2c2b3d3789b8f5faf99f08a5b4. Applying a patch is advised to resolve this issue.
Published: 2026-06-05T12:15:11.835Z
Updated: 2026-06-08T17:03:42.507Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.