Microsoft Security Response Center guidance
Vendor revision: Oct 13, 2026CBL-Mariner Releases Release Notes
Vendor-listed releases
- 2.2.2-15
Vulnerability intelligence
CVE-2025-51480 and is rated High severity with a CVSS score of 8.8. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
CBL-Mariner Releases Release Notes
Vendor-listed releases
Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted external_data.location paths containing traversal sequences, bypassing intended directory restrictions.
Source: NVD