apk package
chainguard/nemo
pkg:apk/chainguard/nemo
Vulnerabilities (221)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-27318 | Hig | 7.5 | < 1.23.0-r12 | 1.23.0-r12 | Feb 23, 2024 | Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is outside the model current directory or user-provided directory. The vulnerability occurs as a bypass |
- affected < 1.23.0-r12fixed 1.23.0-r12
Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is outside the model current directory or user-provided directory. The vulnerability occurs as a bypass
Page 12 of 12