Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.2.1 until 1.22.0, ConvTranspose shape inference processes a weight tensor with fewer than three dimensions without a kernel_shape attribute by deriving an empty effective_kernel_shape and indexing it for the input's spatial dimensions. The flaw affects convTransposeShapeInference_opset11() and the current inference path, and an untrusted model that can pass onnx.checker.check_model() can crash onnx.shape_inference.infer_shapes(), causing denial of service without demonstrated confidentiality or integrity impact. This issue is fixed in version 1.22.0.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.2.1
    until 1.22.0, ConvTranspose shape inference processes a weight tensor with fewer than three dimensions
    without a kernel_shape attribute by deriving an empty effective_kernel_shape and indexing it for the
    input's spatial dimensions. The flaw affects convTransposeShapeInference_opset11() and the current
    inference path, and an untrusted model that can pass onnx.checker.check_model() can crash
    onnx.shape_inference.infer_shapes(), causing denial of service without demonstrated confidentiality or
    integrity impact. This issue is fixed in version 1.22.0. (CVE-2026-115920)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.2.1     until 1.22.0, ConvTranspose shape inference processes a weight tensor with fewer than three dimensions     without a kernel_shape attribute by deriving an empty effective_kernel_shape and indexing it for the     input's spatial dimensions. The flaw affects convTransposeShapeInference_opset11() and the current     inference path, and an untrusted model that can pass onnx.checker.check_model() can crash     onnx.shape_inference.infer_shapes(), causing denial of service without demonstrated confidentiality or     integrity impact. This issue is fixed in version 1.22.0. (CVE-2026-115920)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
477768	SCA: security update for onnx (GHSA-6pwm-x34p-fvj2)	Tenable Cloud Security	SCA Checks	Local	medium
477768	SCA: security update for onnx (GHSA-6pwm-x34p-fvj2)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
372367	Linux Distros Unpatched Vulnerability : CVE-2026-115920	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-115920

medium

Tenable Plugins

medium

medium

medium