Vulnerabilities for monai

First version without a known vulnerability: 1.6.0

Details

• GHSA-wg9g-w2j2-8pgr2026-08-18

  MONAI: Unsafe deserialization in NumpyReader allows arbitrary code execution via malicious .npy files

  Fixed in: 1.6.0

• GHSA-rghg-q7wp-97672026-08-18

  MONAI vulnerable to OS command injection

  Fixed in: 1.6.0

• GHSA-qxq5-qhx6-94qw2026-08-18

  Incomplete Fix in MONAI: algo_from_pickle() pickle.loads() RCE still present in v1.5.2 despite GHSA-89gg-p5r5-q6r4 claiming patch

  Fixed in: 1.6.0

• GHSA-89gg-p5r5-q6r42026-04-07

  MONAI: Unsafe functions lead to pickle deserialization rce

  Fixed in: 1.6.0

• GHSA-9rg3-9pvr-6p272026-01-06

  MONAI has Path Traversal (Zip Slip) in NGC Private Bundle Download

  Fixed in: 1.5.2

• GHSA-p8cm-mm2v-gwjm2025-09-09

  Monai: Unsafe use of Pickle deserialization may lead to RCE

  Fixed in: 1.5.1, 1.5.1rc1

• GHSA-6vm5-6jv9-rjpj2025-09-09

  MONAI: Unsafe torch usage may lead to arbitrary code execution

  Fixed in: 1.5.1, 1.5.1rc1

• GHSA-x6ww-pf9m-m73m2025-09-09

  MONAI does not prevent path traversal, potentially leading to arbitrary file writes

  Fixed in: 1.5.1, 1.5.1rc1