python3Packages.monai

GHSA-89gg-p5r5-q6r4 high 8.8 public exploit MONAI: Unsafe functions lead to pickle deserialization rce (OSV, for this version)

GHSA-qxq5-qhx6-94qw high 8.5 public exploit EPSS 0.2% Incomplete Fix in MONAI: algo_from_pickle() pickle.loads() RCE still present in v1.5.2 despite GHSA-89gg-p5r5-q6r4 claiming patch (OSV, for this version)

GHSA-rghg-q7wp-9767 high 8.6 public exploit EPSS 0.8% MONAI vulnerable to OS command injection (OSV, for this version)

GHSA-wg9g-w2j2-8pgr high 8.5 public exploit EPSS 0.1% MONAI: Unsafe deserialization in NumpyReader allows arbitrary code execution via malicious .npy files (OSV, for this version)

PYSEC-2026-4015 high 8.5 public exploit EPSS 0.2% MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration engine that resolves _target_ values to arbitrary importable callables without an allow list and passes $ expressions to Python eval(). Attackers can publish a malicious bundle with crafted configuration c (OSV, for this version)

PYSEC-2026-4017 high 7.3 public exploit EPSS 0.1% MONAI through 1.6.0 contains an eval injection vulnerability in _get_fake_spatial_shape() in monai/bundle/scripts.py. The function validates shape expressions with a helper that walks the AST and only collects ast.Name nodes, rejecting any name other than 'p' or 'n', before passing the string to eva (OSV, for this version)