Threats affecting pkg:npm/onnx

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.2	EPSS 0.1%	CVE-2026-115921ScanInferenceFunction Due to Missing Required Attribute · ONNX: Null Pointer Dereference Medium6.2EPSS 0.1%2026-10-31GCVE DatabaseCVE-2026-115921 A vulnerability in ONNX version 3.0 involves a null pointer dereference in the ScanInferenceFunction caused by a missing required attribute. This flaw can lead to application crashes or denial of service conditions when the affected function is invoked without the necessary attribute. EPSS 0.1%Report on CVE-2026-115921 Vulnerability Microsoft Security Response Center CWE-195 #microsoft-security-response-ce	GCVE Database	2026-10-31

Page 1 of 1