Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-j99k-be42-mbez
SummaryOpen Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. In versions up to and including 1.20.1, a security control bypass exists in onnx.hub.load() due to improper logic in the repository trust verification mechanism. While the function is designed to warn users when loading models from non-official sources, the use of the silent=True parameter completely suppresses all security warnings and confirmation prompts. This vulnerability transforms a standard model-loading function into a vector for Zero-Interaction Supply-Chain Attacks. When chained with file-system vulnerabilities, an attacker can silently exfiltrate sensitive files (SSH keys, cloud credentials) from the victim's machine the moment the model is loaded. As of time of publication, no known patched versions are available.
Aliases
0
alias CVE-2026-28500
1
alias GHSA-hqmj-h5c6-369m
2
alias PYSEC-2026-103
Fixed_packages
0
url pkg:pypi/onnx@1.21.0rc1
purl pkg:pypi/onnx@1.21.0rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6jhc-gk67-9yd3
1
vulnerability VCID-6qz7-tsht-pygq
2
vulnerability VCID-eryf-jp13-1ya3
3
vulnerability VCID-npzf-nhxr-vfa6
4
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.21.0rc1
Affected_packages
0
url pkg:pypi/onnx@0.1
purl pkg:pypi/onnx@0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4dqn-hpv8-m7gb
1
vulnerability VCID-4rzz-nd8c-myab
2
vulnerability VCID-5qre-2etf-k3aq
3
vulnerability VCID-6jhc-gk67-9yd3
4
vulnerability VCID-6qz7-tsht-pygq
5
vulnerability VCID-eryf-jp13-1ya3
6
vulnerability VCID-hp5n-cuwr-cqen
7
vulnerability VCID-j99k-be42-mbez
8
vulnerability VCID-ksbd-2tba-6yan
9
vulnerability VCID-npzf-nhxr-vfa6
10
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@0.1
1
url pkg:pypi/onnx@0.2
purl pkg:pypi/onnx@0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4dqn-hpv8-m7gb
1
vulnerability VCID-4rzz-nd8c-myab
2
vulnerability VCID-5qre-2etf-k3aq
3
vulnerability VCID-6jhc-gk67-9yd3
4
vulnerability VCID-6qz7-tsht-pygq
5
vulnerability VCID-eryf-jp13-1ya3
6
vulnerability VCID-hp5n-cuwr-cqen
7
vulnerability VCID-j99k-be42-mbez
8
vulnerability VCID-ksbd-2tba-6yan
9
vulnerability VCID-npzf-nhxr-vfa6
10
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@0.2
2
url pkg:pypi/onnx@0.2.1
purl pkg:pypi/onnx@0.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4dqn-hpv8-m7gb
1
vulnerability VCID-4rzz-nd8c-myab
2
vulnerability VCID-5qre-2etf-k3aq
3
vulnerability VCID-6jhc-gk67-9yd3
4
vulnerability VCID-6qz7-tsht-pygq
5
vulnerability VCID-eryf-jp13-1ya3
6
vulnerability VCID-hp5n-cuwr-cqen
7
vulnerability VCID-j99k-be42-mbez
8
vulnerability VCID-ksbd-2tba-6yan
9
vulnerability VCID-npzf-nhxr-vfa6
10
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@0.2.1
3
url pkg:pypi/onnx@1.0.0
purl pkg:pypi/onnx@1.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4dqn-hpv8-m7gb
1
vulnerability VCID-4rzz-nd8c-myab
2
vulnerability VCID-5qre-2etf-k3aq
3
vulnerability VCID-6jhc-gk67-9yd3
4
vulnerability VCID-6qz7-tsht-pygq
5
vulnerability VCID-eryf-jp13-1ya3
6
vulnerability VCID-hp5n-cuwr-cqen
7
vulnerability VCID-j99k-be42-mbez
8
vulnerability VCID-ksbd-2tba-6yan
9
vulnerability VCID-npzf-nhxr-vfa6
10
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.0.0
4
url pkg:pypi/onnx@1.0.1
purl pkg:pypi/onnx@1.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4dqn-hpv8-m7gb
1
vulnerability VCID-4rzz-nd8c-myab
2
vulnerability VCID-5qre-2etf-k3aq
3
vulnerability VCID-6jhc-gk67-9yd3
4
vulnerability VCID-6qz7-tsht-pygq
5
vulnerability VCID-eryf-jp13-1ya3
6
vulnerability VCID-hp5n-cuwr-cqen
7
vulnerability VCID-j99k-be42-mbez
8
vulnerability VCID-ksbd-2tba-6yan
9
vulnerability VCID-npzf-nhxr-vfa6
10
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.0.1
5
url pkg:pypi/onnx@1.1.0
purl pkg:pypi/onnx@1.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4dqn-hpv8-m7gb
1
vulnerability VCID-4rzz-nd8c-myab
2
vulnerability VCID-5qre-2etf-k3aq
3
vulnerability VCID-6jhc-gk67-9yd3
4
vulnerability VCID-6qz7-tsht-pygq
5
vulnerability VCID-eryf-jp13-1ya3
6
vulnerability VCID-hp5n-cuwr-cqen
7
vulnerability VCID-j99k-be42-mbez
8
vulnerability VCID-ksbd-2tba-6yan
9
vulnerability VCID-npzf-nhxr-vfa6
10
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.1.0
6
url pkg:pypi/onnx@1.1.1
purl pkg:pypi/onnx@1.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4dqn-hpv8-m7gb
1
vulnerability VCID-4rzz-nd8c-myab
2
vulnerability VCID-5qre-2etf-k3aq
3
vulnerability VCID-6jhc-gk67-9yd3
4
vulnerability VCID-6qz7-tsht-pygq
5
vulnerability VCID-eryf-jp13-1ya3
6
vulnerability VCID-hp5n-cuwr-cqen
7
vulnerability VCID-j99k-be42-mbez
8
vulnerability VCID-ksbd-2tba-6yan
9
vulnerability VCID-npzf-nhxr-vfa6
10
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.1.1
7
url pkg:pypi/onnx@1.1.2
purl pkg:pypi/onnx@1.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4dqn-hpv8-m7gb
1
vulnerability VCID-4rzz-nd8c-myab
2
vulnerability VCID-5qre-2etf-k3aq
3
vulnerability VCID-6jhc-gk67-9yd3
4
vulnerability VCID-6qz7-tsht-pygq
5
vulnerability VCID-eryf-jp13-1ya3
6
vulnerability VCID-hp5n-cuwr-cqen
7
vulnerability VCID-j99k-be42-mbez
8
vulnerability VCID-ksbd-2tba-6yan
9
vulnerability VCID-npzf-nhxr-vfa6
10
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.1.2
8
url pkg:pypi/onnx@1.2.1
purl pkg:pypi/onnx@1.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4dqn-hpv8-m7gb
1
vulnerability VCID-4rzz-nd8c-myab
2
vulnerability VCID-5qre-2etf-k3aq
3
vulnerability VCID-6jhc-gk67-9yd3
4
vulnerability VCID-6qz7-tsht-pygq
5
vulnerability VCID-eryf-jp13-1ya3
6
vulnerability VCID-hp5n-cuwr-cqen
7
vulnerability VCID-j99k-be42-mbez
8
vulnerability VCID-ksbd-2tba-6yan
9
vulnerability VCID-npzf-nhxr-vfa6
10
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.2.1
9
url pkg:pypi/onnx@1.2.2
purl pkg:pypi/onnx@1.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4dqn-hpv8-m7gb
1
vulnerability VCID-4rzz-nd8c-myab
2
vulnerability VCID-5qre-2etf-k3aq
3
vulnerability VCID-6jhc-gk67-9yd3
4
vulnerability VCID-6qz7-tsht-pygq
5
vulnerability VCID-eryf-jp13-1ya3
6
vulnerability VCID-hp5n-cuwr-cqen
7
vulnerability VCID-j99k-be42-mbez
8
vulnerability VCID-ksbd-2tba-6yan
9
vulnerability VCID-npzf-nhxr-vfa6
10
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.2.2
10
url pkg:pypi/onnx@1.2.3
purl pkg:pypi/onnx@1.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4dqn-hpv8-m7gb
1
vulnerability VCID-4rzz-nd8c-myab
2
vulnerability VCID-5qre-2etf-k3aq
3
vulnerability VCID-6jhc-gk67-9yd3
4
vulnerability VCID-6qz7-tsht-pygq
5
vulnerability VCID-eryf-jp13-1ya3
6
vulnerability VCID-hp5n-cuwr-cqen
7
vulnerability VCID-j99k-be42-mbez
8
vulnerability VCID-ksbd-2tba-6yan
9
vulnerability VCID-npzf-nhxr-vfa6
10
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.2.3
11
url pkg:pypi/onnx@1.3.0
purl pkg:pypi/onnx@1.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4dqn-hpv8-m7gb
1
vulnerability VCID-4rzz-nd8c-myab
2
vulnerability VCID-5qre-2etf-k3aq
3
vulnerability VCID-6jhc-gk67-9yd3
4
vulnerability VCID-6qz7-tsht-pygq
5
vulnerability VCID-eryf-jp13-1ya3
6
vulnerability VCID-hp5n-cuwr-cqen
7
vulnerability VCID-j99k-be42-mbez
8
vulnerability VCID-ksbd-2tba-6yan
9
vulnerability VCID-npzf-nhxr-vfa6
10
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.3.0
12
url pkg:pypi/onnx@1.4.0
purl pkg:pypi/onnx@1.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4dqn-hpv8-m7gb
1
vulnerability VCID-4rzz-nd8c-myab
2
vulnerability VCID-5qre-2etf-k3aq
3
vulnerability VCID-6jhc-gk67-9yd3
4
vulnerability VCID-6qz7-tsht-pygq
5
vulnerability VCID-eryf-jp13-1ya3
6
vulnerability VCID-hp5n-cuwr-cqen
7
vulnerability VCID-j99k-be42-mbez
8
vulnerability VCID-ksbd-2tba-6yan
9
vulnerability VCID-npzf-nhxr-vfa6
10
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.4.0
13
url pkg:pypi/onnx@1.4.1
purl pkg:pypi/onnx@1.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4dqn-hpv8-m7gb
1
vulnerability VCID-4rzz-nd8c-myab
2
vulnerability VCID-5qre-2etf-k3aq
3
vulnerability VCID-6jhc-gk67-9yd3
4
vulnerability VCID-6qz7-tsht-pygq
5
vulnerability VCID-eryf-jp13-1ya3
6
vulnerability VCID-hp5n-cuwr-cqen
7
vulnerability VCID-j99k-be42-mbez
8
vulnerability VCID-ksbd-2tba-6yan
9
vulnerability VCID-npzf-nhxr-vfa6
10
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.4.1
14
url pkg:pypi/onnx@1.5.0
purl pkg:pypi/onnx@1.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4dqn-hpv8-m7gb
1
vulnerability VCID-4rzz-nd8c-myab
2
vulnerability VCID-5qre-2etf-k3aq
3
vulnerability VCID-6jhc-gk67-9yd3
4
vulnerability VCID-6qz7-tsht-pygq
5
vulnerability VCID-eryf-jp13-1ya3
6
vulnerability VCID-hp5n-cuwr-cqen
7
vulnerability VCID-j99k-be42-mbez
8
vulnerability VCID-ksbd-2tba-6yan
9
vulnerability VCID-npzf-nhxr-vfa6
10
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.5.0
15
url pkg:pypi/onnx@1.6.0
purl pkg:pypi/onnx@1.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4dqn-hpv8-m7gb
1
vulnerability VCID-4rzz-nd8c-myab
2
vulnerability VCID-5qre-2etf-k3aq
3
vulnerability VCID-6jhc-gk67-9yd3
4
vulnerability VCID-6qz7-tsht-pygq
5
vulnerability VCID-eryf-jp13-1ya3
6
vulnerability VCID-hp5n-cuwr-cqen
7
vulnerability VCID-j99k-be42-mbez
8
vulnerability VCID-ksbd-2tba-6yan
9
vulnerability VCID-npzf-nhxr-vfa6
10
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.6.0
16
url pkg:pypi/onnx@1.7.0
purl pkg:pypi/onnx@1.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4dqn-hpv8-m7gb
1
vulnerability VCID-4rzz-nd8c-myab
2
vulnerability VCID-5qre-2etf-k3aq
3
vulnerability VCID-6jhc-gk67-9yd3
4
vulnerability VCID-6qz7-tsht-pygq
5
vulnerability VCID-eryf-jp13-1ya3
6
vulnerability VCID-hp5n-cuwr-cqen
7
vulnerability VCID-j99k-be42-mbez
8
vulnerability VCID-ksbd-2tba-6yan
9
vulnerability VCID-npzf-nhxr-vfa6
10
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.7.0
17
url pkg:pypi/onnx@1.8.0
purl pkg:pypi/onnx@1.8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4dqn-hpv8-m7gb
1
vulnerability VCID-4rzz-nd8c-myab
2
vulnerability VCID-5qre-2etf-k3aq
3
vulnerability VCID-6jhc-gk67-9yd3
4
vulnerability VCID-6qz7-tsht-pygq
5
vulnerability VCID-eryf-jp13-1ya3
6
vulnerability VCID-hp5n-cuwr-cqen
7
vulnerability VCID-j99k-be42-mbez
8
vulnerability VCID-ksbd-2tba-6yan
9
vulnerability VCID-npzf-nhxr-vfa6
10
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.8.0
18
url pkg:pypi/onnx@1.8.1
purl pkg:pypi/onnx@1.8.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4dqn-hpv8-m7gb
1
vulnerability VCID-4rzz-nd8c-myab
2
vulnerability VCID-5qre-2etf-k3aq
3
vulnerability VCID-6jhc-gk67-9yd3
4
vulnerability VCID-6qz7-tsht-pygq
5
vulnerability VCID-eryf-jp13-1ya3
6
vulnerability VCID-hp5n-cuwr-cqen
7
vulnerability VCID-j99k-be42-mbez
8
vulnerability VCID-ksbd-2tba-6yan
9
vulnerability VCID-npzf-nhxr-vfa6
10
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.8.1
19
url pkg:pypi/onnx@1.9.0
purl pkg:pypi/onnx@1.9.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4dqn-hpv8-m7gb
1
vulnerability VCID-4rzz-nd8c-myab
2
vulnerability VCID-5qre-2etf-k3aq
3
vulnerability VCID-6jhc-gk67-9yd3
4
vulnerability VCID-6qz7-tsht-pygq
5
vulnerability VCID-eryf-jp13-1ya3
6
vulnerability VCID-hp5n-cuwr-cqen
7
vulnerability VCID-j99k-be42-mbez
8
vulnerability VCID-ksbd-2tba-6yan
9
vulnerability VCID-npzf-nhxr-vfa6
10
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.9.0
20
url pkg:pypi/onnx@1.10.0
purl pkg:pypi/onnx@1.10.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4dqn-hpv8-m7gb
1
vulnerability VCID-4rzz-nd8c-myab
2
vulnerability VCID-5qre-2etf-k3aq
3
vulnerability VCID-6jhc-gk67-9yd3
4
vulnerability VCID-6qz7-tsht-pygq
5
vulnerability VCID-eryf-jp13-1ya3
6
vulnerability VCID-hp5n-cuwr-cqen
7
vulnerability VCID-j99k-be42-mbez
8
vulnerability VCID-ksbd-2tba-6yan
9
vulnerability VCID-npzf-nhxr-vfa6
10
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.10.0
21
url pkg:pypi/onnx@1.10.1
purl pkg:pypi/onnx@1.10.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4dqn-hpv8-m7gb
1
vulnerability VCID-4rzz-nd8c-myab
2
vulnerability VCID-5qre-2etf-k3aq
3
vulnerability VCID-6jhc-gk67-9yd3
4
vulnerability VCID-6qz7-tsht-pygq
5
vulnerability VCID-eryf-jp13-1ya3
6
vulnerability VCID-hp5n-cuwr-cqen
7
vulnerability VCID-j99k-be42-mbez
8
vulnerability VCID-ksbd-2tba-6yan
9
vulnerability VCID-npzf-nhxr-vfa6
10
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.10.1
22
url pkg:pypi/onnx@1.10.2
purl pkg:pypi/onnx@1.10.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4dqn-hpv8-m7gb
1
vulnerability VCID-4rzz-nd8c-myab
2
vulnerability VCID-5qre-2etf-k3aq
3
vulnerability VCID-6jhc-gk67-9yd3
4
vulnerability VCID-6qz7-tsht-pygq
5
vulnerability VCID-eryf-jp13-1ya3
6
vulnerability VCID-hp5n-cuwr-cqen
7
vulnerability VCID-j99k-be42-mbez
8
vulnerability VCID-ksbd-2tba-6yan
9
vulnerability VCID-npzf-nhxr-vfa6
10
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.10.2
23
url pkg:pypi/onnx@1.11.0
purl pkg:pypi/onnx@1.11.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4dqn-hpv8-m7gb
1
vulnerability VCID-4rzz-nd8c-myab
2
vulnerability VCID-5qre-2etf-k3aq
3
vulnerability VCID-6jhc-gk67-9yd3
4
vulnerability VCID-6qz7-tsht-pygq
5
vulnerability VCID-eryf-jp13-1ya3
6
vulnerability VCID-hp5n-cuwr-cqen
7
vulnerability VCID-j99k-be42-mbez
8
vulnerability VCID-ksbd-2tba-6yan
9
vulnerability VCID-npzf-nhxr-vfa6
10
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.11.0
24
url pkg:pypi/onnx@1.12.0
purl pkg:pypi/onnx@1.12.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4dqn-hpv8-m7gb
1
vulnerability VCID-4rzz-nd8c-myab
2
vulnerability VCID-5qre-2etf-k3aq
3
vulnerability VCID-6jhc-gk67-9yd3
4
vulnerability VCID-6qz7-tsht-pygq
5
vulnerability VCID-eryf-jp13-1ya3
6
vulnerability VCID-hp5n-cuwr-cqen
7
vulnerability VCID-j99k-be42-mbez
8
vulnerability VCID-ksbd-2tba-6yan
9
vulnerability VCID-npzf-nhxr-vfa6
10
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.12.0
25
url pkg:pypi/onnx@1.13.0
purl pkg:pypi/onnx@1.13.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4dqn-hpv8-m7gb
1
vulnerability VCID-4rzz-nd8c-myab
2
vulnerability VCID-6jhc-gk67-9yd3
3
vulnerability VCID-6qz7-tsht-pygq
4
vulnerability VCID-eryf-jp13-1ya3
5
vulnerability VCID-hp5n-cuwr-cqen
6
vulnerability VCID-j99k-be42-mbez
7
vulnerability VCID-ksbd-2tba-6yan
8
vulnerability VCID-npzf-nhxr-vfa6
9
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.13.0
26
url pkg:pypi/onnx@1.13.1
purl pkg:pypi/onnx@1.13.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4dqn-hpv8-m7gb
1
vulnerability VCID-4rzz-nd8c-myab
2
vulnerability VCID-6jhc-gk67-9yd3
3
vulnerability VCID-6qz7-tsht-pygq
4
vulnerability VCID-eryf-jp13-1ya3
5
vulnerability VCID-hp5n-cuwr-cqen
6
vulnerability VCID-j99k-be42-mbez
7
vulnerability VCID-ksbd-2tba-6yan
8
vulnerability VCID-npzf-nhxr-vfa6
9
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.13.1
27
url pkg:pypi/onnx@1.14.0
purl pkg:pypi/onnx@1.14.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4dqn-hpv8-m7gb
1
vulnerability VCID-4rzz-nd8c-myab
2
vulnerability VCID-6jhc-gk67-9yd3
3
vulnerability VCID-6qz7-tsht-pygq
4
vulnerability VCID-eryf-jp13-1ya3
5
vulnerability VCID-hp5n-cuwr-cqen
6
vulnerability VCID-j99k-be42-mbez
7
vulnerability VCID-ksbd-2tba-6yan
8
vulnerability VCID-npzf-nhxr-vfa6
9
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.14.0
28
url pkg:pypi/onnx@1.14.1
purl pkg:pypi/onnx@1.14.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4dqn-hpv8-m7gb
1
vulnerability VCID-4rzz-nd8c-myab
2
vulnerability VCID-6jhc-gk67-9yd3
3
vulnerability VCID-6qz7-tsht-pygq
4
vulnerability VCID-eryf-jp13-1ya3
5
vulnerability VCID-hp5n-cuwr-cqen
6
vulnerability VCID-j99k-be42-mbez
7
vulnerability VCID-ksbd-2tba-6yan
8
vulnerability VCID-npzf-nhxr-vfa6
9
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.14.1
29
url pkg:pypi/onnx@1.15.0
purl pkg:pypi/onnx@1.15.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4dqn-hpv8-m7gb
1
vulnerability VCID-4rzz-nd8c-myab
2
vulnerability VCID-6jhc-gk67-9yd3
3
vulnerability VCID-6qz7-tsht-pygq
4
vulnerability VCID-eryf-jp13-1ya3
5
vulnerability VCID-hp5n-cuwr-cqen
6
vulnerability VCID-j99k-be42-mbez
7
vulnerability VCID-ksbd-2tba-6yan
8
vulnerability VCID-npzf-nhxr-vfa6
9
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.15.0
30
url pkg:pypi/onnx@1.16.0
purl pkg:pypi/onnx@1.16.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6jhc-gk67-9yd3
1
vulnerability VCID-6qz7-tsht-pygq
2
vulnerability VCID-eryf-jp13-1ya3
3
vulnerability VCID-hp5n-cuwr-cqen
4
vulnerability VCID-j99k-be42-mbez
5
vulnerability VCID-ksbd-2tba-6yan
6
vulnerability VCID-npzf-nhxr-vfa6
7
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.16.0
31
url pkg:pypi/onnx@1.16.1
purl pkg:pypi/onnx@1.16.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6jhc-gk67-9yd3
1
vulnerability VCID-6qz7-tsht-pygq
2
vulnerability VCID-eryf-jp13-1ya3
3
vulnerability VCID-hp5n-cuwr-cqen
4
vulnerability VCID-j99k-be42-mbez
5
vulnerability VCID-ksbd-2tba-6yan
6
vulnerability VCID-npzf-nhxr-vfa6
7
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.16.1
32
url pkg:pypi/onnx@1.16.2
purl pkg:pypi/onnx@1.16.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6jhc-gk67-9yd3
1
vulnerability VCID-6qz7-tsht-pygq
2
vulnerability VCID-eryf-jp13-1ya3
3
vulnerability VCID-j99k-be42-mbez
4
vulnerability VCID-ksbd-2tba-6yan
5
vulnerability VCID-npzf-nhxr-vfa6
6
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.16.2
33
url pkg:pypi/onnx@1.17.0
purl pkg:pypi/onnx@1.17.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6jhc-gk67-9yd3
1
vulnerability VCID-6qz7-tsht-pygq
2
vulnerability VCID-eryf-jp13-1ya3
3
vulnerability VCID-j99k-be42-mbez
4
vulnerability VCID-npzf-nhxr-vfa6
5
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.17.0
34
url pkg:pypi/onnx@1.18.0
purl pkg:pypi/onnx@1.18.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6jhc-gk67-9yd3
1
vulnerability VCID-6qz7-tsht-pygq
2
vulnerability VCID-eryf-jp13-1ya3
3
vulnerability VCID-j99k-be42-mbez
4
vulnerability VCID-npzf-nhxr-vfa6
5
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.18.0
35
url pkg:pypi/onnx@1.19.0
purl pkg:pypi/onnx@1.19.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6jhc-gk67-9yd3
1
vulnerability VCID-6qz7-tsht-pygq
2
vulnerability VCID-eryf-jp13-1ya3
3
vulnerability VCID-j99k-be42-mbez
4
vulnerability VCID-npzf-nhxr-vfa6
5
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.19.0
36
url pkg:pypi/onnx@1.19.1rc1
purl pkg:pypi/onnx@1.19.1rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6jhc-gk67-9yd3
1
vulnerability VCID-6qz7-tsht-pygq
2
vulnerability VCID-eryf-jp13-1ya3
3
vulnerability VCID-j99k-be42-mbez
4
vulnerability VCID-npzf-nhxr-vfa6
5
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.19.1rc1
37
url pkg:pypi/onnx@1.19.1
purl pkg:pypi/onnx@1.19.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6jhc-gk67-9yd3
1
vulnerability VCID-6qz7-tsht-pygq
2
vulnerability VCID-eryf-jp13-1ya3
3
vulnerability VCID-j99k-be42-mbez
4
vulnerability VCID-npzf-nhxr-vfa6
5
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.19.1
38
url pkg:pypi/onnx@1.20.0rc1
purl pkg:pypi/onnx@1.20.0rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6jhc-gk67-9yd3
1
vulnerability VCID-6qz7-tsht-pygq
2
vulnerability VCID-eryf-jp13-1ya3
3
vulnerability VCID-j99k-be42-mbez
4
vulnerability VCID-npzf-nhxr-vfa6
5
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.20.0rc1
39
url pkg:pypi/onnx@1.20.0rc2
purl pkg:pypi/onnx@1.20.0rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6jhc-gk67-9yd3
1
vulnerability VCID-6qz7-tsht-pygq
2
vulnerability VCID-eryf-jp13-1ya3
3
vulnerability VCID-j99k-be42-mbez
4
vulnerability VCID-npzf-nhxr-vfa6
5
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.20.0rc2
40
url pkg:pypi/onnx@1.20.0
purl pkg:pypi/onnx@1.20.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6jhc-gk67-9yd3
1
vulnerability VCID-6qz7-tsht-pygq
2
vulnerability VCID-eryf-jp13-1ya3
3
vulnerability VCID-j99k-be42-mbez
4
vulnerability VCID-npzf-nhxr-vfa6
5
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.20.0
41
url pkg:pypi/onnx@1.20.1rc1
purl pkg:pypi/onnx@1.20.1rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6jhc-gk67-9yd3
1
vulnerability VCID-6qz7-tsht-pygq
2
vulnerability VCID-eryf-jp13-1ya3
3
vulnerability VCID-j99k-be42-mbez
4
vulnerability VCID-npzf-nhxr-vfa6
5
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.20.1rc1
42
url pkg:pypi/onnx@1.20.1
purl pkg:pypi/onnx@1.20.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6jhc-gk67-9yd3
1
vulnerability VCID-6qz7-tsht-pygq
2
vulnerability VCID-eryf-jp13-1ya3
3
vulnerability VCID-j99k-be42-mbez
4
vulnerability VCID-npzf-nhxr-vfa6
5
vulnerability VCID-s5tc-zemd-83b5
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/onnx@1.20.1
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-28500.json
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-28500.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-28500
reference_id
reference_type
scores
0
value 0.00011
scoring_system epss
scoring_elements 0.0154
published_at 2026-06-11T12:55:00Z
1
value 0.00011
scoring_system epss
scoring_elements 0.01544
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-28500
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28500
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28500
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/onnx/PYSEC-2026-103.yaml
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/onnx/PYSEC-2026-103.yaml
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-28500
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-28500
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1131209
reference_id 1131209
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1131209
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2448518
reference_id 2448518
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2448518
7
reference_url https://github.com/ZeroXJacks/CVEs/blob/main/2026/CVE-2026-28500.md
reference_id CVE-2026-28500.md
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
1
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-18T14:08:46Z/
url https://github.com/ZeroXJacks/CVEs/blob/main/2026/CVE-2026-28500.md
8
reference_url https://github.com/advisories/GHSA-hqmj-h5c6-369m
reference_id GHSA-hqmj-h5c6-369m
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-hqmj-h5c6-369m
9
reference_url https://github.com/onnx/onnx/security/advisories/GHSA-hqmj-h5c6-369m
reference_id GHSA-hqmj-h5c6-369m
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
1
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
2
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
3
value HIGH
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-18T14:08:46Z/
url https://github.com/onnx/onnx/security/advisories/GHSA-hqmj-h5c6-369m
10
reference_url https://access.redhat.com/errata/RHSA-2026:24977
reference_id RHSA-2026:24977
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:24977
Weaknesses
0
cwe_id 345
name Insufficient Verification of Data Authenticity
description The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
1
cwe_id 494
name Download of Code Without Integrity Check
description The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.
2
cwe_id 693
name Protection Mechanism Failure
description The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.
3
cwe_id 829
name Inclusion of Functionality from Untrusted Control Sphere
description The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.
4
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
5
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score7.0 - 9.1
Exploitability0.5
Weighted_severity8.2
Risk_score4.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-j99k-be42-mbez