Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-4021
  • PyPI/monai
See record for full details 6 days ago
  • Fix available
  • Severity - 8.8 (High)
PYSEC-2026-4020
  • PyPI/monai
See record for full details 6 days ago
  • Fix available
  • Severity - 8.5 (High)
PYSEC-2026-4019
  • PyPI/monai
See record for full details 6 days ago
  • Fix available
  • Severity - 7.8 (High)
PYSEC-2026-4018
  • PyPI/monai
See record for full details 6 days ago
  • Fix available
  • Severity - 8.5 (High)
PYSEC-2026-4017
  • PyPI/monai
See record for full details 6 days ago
  • Fix available
  • Severity - 8.8 (High)
PYSEC-2026-4016
  • PyPI/monai
See record for full details 6 days ago
  • No fix available
  • Severity - 8.5 (High)
PYSEC-2026-4015
  • PyPI/monai
See record for full details 6 days ago
  • Fix available
  • Severity - 8.5 (High)
GHSA-wg9g-w2j2-8pgr
  • PyPI/monai
MONAI: Unsafe deserialization in NumpyReader allows arbitrary code execution via malicious .npy files 18 Aug
  • Fix available
  • Severity - 7.8 (High)
GHSA-rghg-q7wp-9767
  • PyPI/monai
MONAI vulnerable to OS command injection 18 Aug
  • Fix available
  • Severity - 8.6 (High)
GHSA-qxq5-qhx6-94qw
  • PyPI/monai
Incomplete Fix in MONAI: algo_from_pickle() pickle.loads() RCE still present in v1.5.2 despite GHSA-89gg-p5r5-q6r4 claiming patch 18 Aug
  • Fix available
  • Severity - 7.8 (High)
PYSEC-2026-1678
  • PyPI/monai
MONAI has Path Traversal (Zip Slip) in NGC Private Bundle Download 07 Jul
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-89gg-p5r5-q6r4
  • PyPI/monai
MONAI: Unsafe functions lead to pickle deserialization rce 07 Apr
  • Fix available
  • Severity - 7.6 (High)
GHSA-9rg3-9pvr-6p27
  • PyPI/monai
MONAI has Path Traversal (Zip Slip) in NGC Private Bundle Download 06 Jan
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-p8cm-mm2v-gwjm
  • PyPI/monai
Monai: Unsafe use of Pickle deserialization may lead to RCE 09 Sep 2025
  • Fix available
  • Severity - 8.8 (High)
GHSA-6vm5-6jv9-rjpj
  • PyPI/monai
MONAI: Unsafe torch usage may lead to arbitrary code execution 09 Sep 2025
  • Fix available
  • Severity - 8.8 (High)
GHSA-x6ww-pf9m-m73m
  • PyPI/monai
MONAI does not prevent path traversal, potentially leading to arbitrary file writes 09 Sep 2025
  • Fix available
  • Severity - 8.8 (High)