Package Health/com.microsoft.onnxruntime:onnxruntime

onnxruntime

ONNX Runtime is a performance-focused inference engine for ONNX (Open Neural Network Exchange) models.

Latest 1.30.0com.microsoft.onnxruntime

Maven

94%

Total Score

Maintainer Stability

100

Maturity

100

Supply Chain

Attestations

100

Are you affected? Scan for Free

Health Score Breakdown

Token permissions

Thirteen analyzed workflows lack top-level permissions and 16 declare top-level write access, which is a workflow-hardening gap; however, the dangerous-workflow scan found no high-risk trigger, checkout, or injection pattern.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-10294 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. onnxruntime is vulnerable to Out-of-bound read in versions 0.1.4 - 1.24.1.	0.1.4 - 1.24.1	Medium
AIKIDO-2026-10184 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. onnxruntime is vulnerable to Null Pointer Dereference in versions 1.23.0 - 1.24.0.	1.23.0 - 1.24.0	Medium