18:17
2026-10-15
dev.to
ai-safety
Statically catching the CVE-2026-34445 ONNX external_data attribute-injection vector before the model loads
A developer at Munim, Inc. released a free, Apache-2.0 static scanner that detects the CVE-2026-34445 attribute-injection vector in ONNX models before any loader runs. The tool, shipped as v0.13.0 of …