Detections
Analytics

SCA: security update for onnx (GHSA-48m4-24cq-37qf)

medium Tenable Cloud Security Plugin ID 477791

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to
 1.22.0, RNNShapeInference_opset1_to_6() processes malformed RNN and LSTM nodes from opsets 1 through 6 and
 GRU nodes from opsets 3 through 6 without verifying that the first input has rank three. The function
 accesses dim(0) and dim(1) on an undersized protobuf shape, which can read outside the intended repeated
 field and terminate an application when onnx.shape_inference.infer_shapes() processes an untrusted model
 that can pass onnx.checker.check_model(). This issue is fixed in version 1.22.0. (CVE-2026-115919)

Solution

Update the onnx library and its related packages to version 1.22.0 or later.

See Also

https://github.com/advisories/GHSA-48m4-24cq-37qf

Plugin Details

Severity: Medium

ID: 477791

Version: Revision 1.1

Type: Local

Family: SCA Checks

Published: 10/29/2026

Updated: 10/29/2026

Risk Information

VPR

Risk Factor: Medium

Score: 5

Percentile: 92.94

Vendor

Vendor Severity: Medium

CVSS v2

Risk Factor: Medium

Base Score: 4.9

Temporal Score: 3.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C

CVSS Score Source: CVE-2026-115919

CVSS v3

Risk Factor: Medium

Base Score: 6.2

Temporal Score: 5.4

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 10/28/2026

Vulnerability Publication Date: 10/26/2026

Reference Information

CVE: CVE-2026-115919

cwe: CWE-125