monai vulnerabilities (PyPI)
12 vulnerabilities.
-
monaiPyPI MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass) 9.3 Critical -
monaiPyPI MONAI through 1.6.0 _get_fake_spatial_shape eval() Sandbox Bypass via Attribute Chains 7.3 High -
monaiPyPI MONAI through 1.6.0 PersistentDataset Remote Code Execution via Pickle Cache 8.5 High -
monaiPyPI MONAI through 1.6.0 Remote Code Execution via bundle configuration 8.5 High -
monaiPyPI MONAI before 1.6.0 Remote Code Execution via NumpyReader 8.5 High -
monaiPyPI MONAI before 1.6.0 OS Command Injection via dataset_name_or_id 8.6 High -
monaiPyPI MONAI before 1.6.0 Remote Code Execution via algo_from_pickle 8.5 High -
monaiPyPI MONAI before 1.5.2 Remote Code Execution via Pickle Deserialization 8.8 High -
monaiPyPI MONAI has Path Traversal (Zip Slip) in NGC Private Bundle Download 5.3 Medium -
monaiPyPI MONAI's unsafe use of Pickle deserialization may lead to RCE 8.8 High -
monaiPyPI MONAI's unsafe torch usage may lead to arbitrary code execution 8.8 High -
monaiPyPI MONAI has path traversal issue that may lead to arbitrary file writes 8.8 High