https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 22:56:33 +0000 https://cve.radiocsirt.org/vuln/cve-2026-49114 <p><strong>Affected:</strong> ONNX</p> <p>In ONNX before 1.21.0, the &#39;save_external_data&#39; function builds the external-data file path from the model&#39;s external_data location field and opens it for writing without &#39;O_NOFOLLOW/O_EXCL&#39;, after a non-atomic &#39;os.path.isfile()&#39; check. A local attacker with write access to the directory where a victim serializes external data can deterministically pre-plant a symlink that is being followed, causing the victim&#39;s write to append to any file the victim can write, e.g. ~/.ssh/authorized_keys, cron files, or application configs. Fixed in 1.21.0.</p> <p><strong>Affected:</strong> ONNX</p> <p>In ONNX before 1.21.0, the &#39;save_external_data&#39; function builds the external-data file path from the model&#39;s external_data location field and opens it for writing without &#39;O_NOFOLLOW/O_EXCL&#39;, after a non-atomic &#39;os.path.isfile()&#39; check. A local attacker with write access to the directory where a victim serializes external data can deterministically pre-plant a symlink that is being followed, causing the victim&#39;s write to append to any file the victim can write, e.g. ~/.ssh/authorized_keys, cron files, or application configs. Fixed in 1.21.0.</p> https://cve.radiocsirt.org/vuln/cve-2026-49114