<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 06 Oct 2026 04:01:07 +0000</lastBuildDate>
    <item>
      <title>CVE-2024-7776 — Arbitrary File Overwrite in onnx/onnx</title>
      <link>https://cve.radiocsirt.org/vuln/cve-2024-7776</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; onnx/onnx&lt;/p&gt;
&lt;p&gt;A vulnerability in the `download_model` function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability can be exploited by an attacker to overwrite files in the user&amp;#39;s directory, potentially leading to remote command execution.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; onnx/onnx&lt;/p&gt;
&lt;p&gt;A vulnerability in the `download_model` function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability can be exploited by an attacker to overwrite files in the user&amp;#39;s directory, potentially leading to remote command execution.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/cve-2024-7776</guid>
    </item>
  </channel>
</rss>
