← Packages
onnx
Open standard for machine learning interoperability
- Current
- 1.20.1
- Candidate
- CheckFailed
- Comparison
- Cannot compare current observations
- License
- Apache-2.0
Advisory · 1
Provider matches do not establish RPM applicability. Local patches, bundled dependencies and binary artifacts are not evaluated.
- Summary
- ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain AttackOSV
- Fixed events
- —OSV
- EPSS model date
- 2026-11-10FIRST
- EPSS probability
- 0.33%FIRST
- Aliases
- GHSA-hqmj-h5c6-369m, PYSEC-2026-103OSV
- KEV
- NoCISA
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:NOSV
Description
onnx provides an open source format for AI models, both deep learning and traditional ML. It defines an extensible computation graph model, as well as definitions of built-in operators and standard data types.
Changelog
PR · 4
Checks
| Monitor | Observation | Last checked |
|---|---|---|
Stale Repository refresh: git fetch exited 128 (authentication) | ||
CheckFailed nvchecker rate limited Source last confirmed at 2026-11-10T19:28:57+00:00; repository refresh overdue. | Last attempted | |
Checked | ||
Checked | ||
Not configured No reliable monitor identity/configuration. | — | |
Not configured No reliable monitor identity/configuration. | — | |
Not configured No reliable monitor identity/configuration. | — | |
Checked Repository query; subpackage and local-patch applicability are not evaluated. | Last attempted | |
Not configured No reliable monitor identity/configuration. | — |