feat(security): detect CVE-2024-27318 ONNX nested path traversal bypass#607

Merged

yash2998chhabria merged 15 commits intomainfrom

feat/cve-2024-27318-detection

Mar 4, 2026

Commits on Mar 4, 2026

feat(security): detect CVE-2024-27318 ONNX nested path traversal bypass

authored and
yash2998chhabria
committed
fix(security): use Path.relative_to() for path containment check

authored and
yash2998chhabria
committed
fix: use path-segment matching for ".." traversal detection

authored and
yash2998chhabria
committed
fix(onnx): require directory escape for traversal CVE tagging

mldangelo
authored and
yash2998chhabria
committed
feat(security): detect CVE-2025-9906 Keras enable_unsafe_deserialization config bypass

authored and
yash2998chhabria
committed
fix(keras): make CVE-2025-9906 detection structured and contextual

mldangelo
authored and
yash2998chhabria
committed
fix: use CheckStatus enum instead of non-existent passed attribute

authored and
yash2998chhabria
committed
ci: trigger CI run

mldangelo
authored and
yash2998chhabria
committed
fix(security): add CVE-2025-9906 description metadata

mldangelo
authored and
yash2998chhabria
committed
test(onnx): clarify normalized in-dir traversal fixture intent

mldangelo
authored and
yash2998chhabria
committed
fix: add get_cve_2024_27318_explanation() for ONNX nested traversal

yash2998chhabria
and
claude
committed
ci: trigger workflow
yash2998chhabria
committed
fix: restore CVE-2025-51480 write traversal tracking and fix type hints

yash2998chhabria
and
claude
committed
docs: document document-wide token scanning design trade-off

yash2998chhabria
and
claude
committed
Merge origin/main into feat/cve-2024-27318-detection
yash2998chhabria
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(security): detect CVE-2024-27318 ONNX nested path traversal bypass#607

feat(security): detect CVE-2024-27318 ONNX nested path traversal bypass#607
yash2998chhabria merged 15 commits intomainfrom
feat/cve-2024-27318-detection

Commits on Mar 4, 2026

feat(security): detect CVE-2024-27318 ONNX nested path traversal bypass

fix(security): use Path.relative_to() for path containment check

fix: use path-segment matching for ".." traversal detection

fix(onnx): require directory escape for traversal CVE tagging

feat(security): detect CVE-2025-9906 Keras enable_unsafe_deserialization config bypass

fix(keras): make CVE-2025-9906 detection structured and contextual

fix: use CheckStatus enum instead of non-existent passed attribute

ci: trigger CI run

fix(security): add CVE-2025-9906 description metadata

test(onnx): clarify normalized in-dir traversal fixture intent

fix: add get_cve_2024_27318_explanation() for ONNX nested traversal

ci: trigger workflow

fix: restore CVE-2025-51480 write traversal tracking and fix type hints

docs: document document-wide token scanning design trade-off

Merge origin/main into feat/cve-2024-27318-detection