Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-27319

Fixed in a distro release EPSS <1%CVSS 4.4

Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNX_ASSERT and ONNX_ASSERTM functions have an off by one string copy.

Published 2024-02-23 · CVE record · OSV

Products: onnx

Fixed upstream

EcosystemPackageFixed in
PyPIonnx1.16.0
PyPIonnx08a399ba75a805b7813ab8936b91d0e274b08287

Distro releases

ReleasePackageFixed in
Chainguardnemo1.23.0-r12