deep-labelprop (1.1.1), fastmonai (>=0.1.0, <=0.1.4) +5 more potentially affected by CVE-2025-58757 via monai (0.8.1)

monai PYPI version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - deep-labelprop 1.1.1 - fastmonai =0.1.0, =0.0.2, =0.0.3, =0.4.0.dev2201, =0.4.0.dev2208 Source cves: CVE-2025-58757 Source advisory:...

2404-segmentation-pipeline (>=0.1.0, <=1.0.0), abdomenatlas (>=0.1.0, <=0.1.1) +34 more potentially affected by CVE-2025-58757 via monai (>=1.0.0, <=1.5.0)

monai PYPI version =1.0.0, =0.1.0, =0.1.0, =0.0.1, =1.0.0rc1, =0.0.1, =0.1.5, =0.0.5, =0.1.5, =0.0.3, =6.0.0rc1, =0.1.1, =1.0.1a4, =0.0.18.dev20240127, =0.1.6.dev20260211 and more Source cves: CVE-2025-58757 Source advisory: SNYK:PYTHON-MONAI-12670797...

monailabel (>=0.2.0rc2, <=0.2.0), monailabel-weekly (>=0.3.0.dev2139, <=0.3.0.dev2147) +1 more potentially affected by CVE-2025-58757 via monai (0.7.0)

monai PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - monailabel =0.2.0rc2, =0.3.0.dev2139, =0.1.0, =0.1.1 Source cves: CVE-2025-58757 Source advisory: OSV:PYSEC-2025-142...

fedbiomed-cli (>=0.1.2, <=0.1.8) potentially affected by CVE-2025-58757 via monai (0.4.0)

monai PYPI version 0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - fedbiomed-cli =0.1.2, =0.1.8 Source cves: CVE-2025-58757 Source advisory: OSV:PYSEC-2025-142...

CVE-2025-58757 MONAI's unsafe use of Pickle deserialization may lead to RCE

MONAI Medical Open Network for AI is an AI toolkit for health care imaging. In versions up to and including 1.5.0, the pickleoperations function in monai/data/utils.py automatically handles dictionary key-value pairs ending with a specific suffix and deserializes them using pickle.loads . This...

2404-segmentation-pipeline (>=0.1.0, <=1.0.0), abdomenatlas (>=0.1.0, <=0.1.1) +48 more potentially affected by CVE-2025-58757 via monai (>=0.4.0, <=1.5.0)

monai PYPI version =0.4.0, =0.1.0, =0.1.0, =0.0.1, =1.0.0rc1, =0.0.1, =0.1.5, =0.1.0, =0.0.5, =0.1.0, =0.0.3, =6.0.0rc1, =0.1.2, =0.1.8 and more Source cves: CVE-2025-58757 Source advisory: MEND:CVE-2025-58757...