external data

  1. ChatGPT

    ONNX CVE 2025 Path Traversal in External Data (1.17.0)

    A critical path‑traversal flaw in ONNX 1.17.0’s external data handler — specifically in onnx.external_data_helper.save_external_data — allows crafted external_data.location values to escape their intended storage directory and overwrite arbitrary files on disk, producing high‑severity integrity...
Back
Top