PYSEC-2026-1678 MONAI has Path Traversal (Zip Slip) in NGC Private Bundle Download

Summary A Path Traversal Zip Slip vulnerability exists in MONAI's downloadfromngcprivate function. The function uses zipfile.ZipFile.extractall without path validation, while other similar download functions in the same codebase properly use the existing safeextractmember function. This appears t...

monailabel (>=0.2.0rc2, <=0.2.0), monailabel-weekly (>=0.3.0.dev2139, <=0.3.0.dev2147) +1 more potentially affected by CVE-2026-21851 via monai (0.7.0)

monai PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - monailabel =0.2.0rc2, =0.3.0.dev2139, =0.1.0, =0.1.1 Source cves: CVE-2026-21851 Source advisory: OSV:PYSEC-2026-1678...

magms (>=1.1.0, <=2.0.2) potentially affected by CVE-2026-21851 via monai (0.9.1)

monai PYPI version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - magms =1.1.0, =2.0.2 Source cves: CVE-2026-21851 Source advisory: OSV:PYSEC-2026-1678...

deep-labelprop (1.1.1), fastmonai (>=0.1.0, <=0.1.4) +5 more potentially affected by CVE-2026-21851 via monai (0.8.1)

monai PYPI version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - deep-labelprop 1.1.1 - fastmonai =0.1.0, =0.0.2, =0.0.3, =0.4.0.dev2201, =0.4.0.dev2208 Source cves: CVE-2026-21851 Source advisory: OSV:PYSEC-2026-16...

fl-manager-components-formatters-pillow (0.1.0), fl-manager-components-preprocessors-torchvision (0.1.0) +8 more potentially affected by CVE-2026-24178 via nvflare (>=2.2.0, <=2.7.1)

nvflare PYPI version =2.2.0, =0.1.0, =0.2.0, =3.1.27, =3.1.27, =3.1.31 Source cves: CVE-2026-24178 Source advisory: SNYK:PYTHON-NVFLARE-16318747...

fl-manager-components-formatters-pillow (0.1.0), fl-manager-components-preprocessors-torchvision (0.1.0) +8 more potentially affected by CVE-2026-24204 via nvflare (>=2.2.0, <=2.7.1)

nvflare PYPI version =2.2.0, =0.1.0, =0.2.0, =3.1.27, =3.1.27, =3.1.31 Source cves: CVE-2026-24204 Source advisory: SNYK:PYTHON-NVFLARE-16318745...

fl-manager-components-formatters-pillow (0.1.0), fl-manager-components-preprocessors-torchvision (0.1.0) +8 more potentially affected by CVE-2026-24178 via nvflare (>=2.2.0, <=2.7.1)

nvflare PYPI version =2.2.0, =0.1.0, =0.2.0, =3.1.27, =3.1.27, =3.1.31 Source cves: CVE-2026-24178 Source advisory: OSV:PYSEC-2026-100...

MONAI: Unsafe functions lead to pickle deserialization rce

Summary The algofrompickle function in monai/auto3dseg/utils.py causes pickle.loadsdatabytes to be executed, and it does not perform any validation on the input parameters. This ultimately leads to insecure deserialization and can result in code execution vulnerabilities. Details poc import pickl...

Deserialization of Untrusted Data

Overview monai is an AI Toolkit for Healthcare Imaging Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the algofrompickle function in monai/auto3dseg/utils.py. An attacker can execute arbitrary code by providing a crafted pickle file that is deserialized...

2404-segmentation-pipeline (>=0.1.0, <=1.0.0), abdomenatlas (>=0.1.0, <=0.1.1) +38 more potentially affected by CVE-2026-100846 via monai (>=1.0.0, <=1.5.2)

monai PYPI version =1.0.0, =0.1.0, =0.1.0, =0.0.1, =1.0.0rc1, =0.0.1, =0.1.5, =0.0.5, =0.1.5, =0.0.3, =6.0.0rc1, =0.1.1, =1.0.1a4, =1.0.1a5 and more Source cves: CVE-2026-100846 Source advisory: OSV:GHSA-89GG-P5R5-Q6R4...

monailabel (0.4.1), monailabel-weekly (0.4.0.dev2228) +2 more potentially affected by CVE-2026-100846 via monai (0.9.0)

monai PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - monailabel 0.4.1 - monailabel-weekly 0.4.0.dev2228 - neurips-cellseg-gc =0.0.1, =0.1.5, =0.1.10 Source cves: CVE-2026-100846 Source advisory:...

deep-labelprop (1.1.1), fastmonai (>=0.1.0, <=0.1.4) +5 more potentially affected by CVE-2026-100846 via monai (0.8.1)

monai PYPI version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - deep-labelprop 1.1.1 - fastmonai =0.1.0, =0.0.2, =0.0.3, =0.4.0.dev2201, =0.4.0.dev2208 Source cves: CVE-2026-100846 Source advisory:...

autorad (0.1.2), monailabel (0.3.0) +2 more potentially affected by CVE-2026-100846 via monai (0.8.0)

monai PYPI version 0.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - autorad 0.1.2 - monailabel 0.3.0 - monailabel-weekly =0.3.0.dev2150, =0.1.2, =0.1.4 Source cves: CVE-2026-100846 Source advisory: OSV:GHSA-89GG-P5R5-Q...

monailabel (>=0.2.0rc2, <=0.2.0), monailabel-weekly (>=0.3.0.dev2139, <=0.3.0.dev2147) +1 more potentially affected by CVE-2026-100846 via monai (0.7.0)

monai PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - monailabel =0.2.0rc2, =0.3.0.dev2139, =0.1.0, =0.1.1 Source cves: CVE-2026-100846 Source advisory: OSV:GHSA-89GG-P5R5-Q6R4...

fedbiomed-cli (>=0.1.2, <=0.1.8) potentially affected by CVE-2026-100846 via monai (0.4.0)

monai PYPI version 0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - fedbiomed-cli =0.1.2, =0.1.8 Source cves: CVE-2026-100846 Source advisory: OSV:GHSA-89GG-P5R5-Q6R4...

GHSA-89GG-P5R5-Q6R4 MONAI: Unsafe functions lead to pickle deserialization rce

Summary The algofrompickle function in monai/auto3dseg/utils.py causes pickle.loadsdatabytes to be executed, and it does not perform any validation on the input parameters. This ultimately leads to insecure deserialization and can result in code execution vulnerabilities. Details poc import pickl...

2404-segmentation-pipeline (>=0.1.0, <=1.0.0), abdomenatlas (>=0.1.0, <=0.1.1) +38 more potentially affected by unknown CVE via monai (>=1.0.0, <=1.5.2)

monai PYPI version =1.0.0, =0.1.0, =0.1.0, =0.0.1, =1.0.0rc1, =0.0.1, =0.1.5, =0.0.5, =0.1.5, =0.0.3, =6.0.0rc1, =0.1.1, =1.0.1a4, =1.0.1a5 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-MONAI-15928871...

2404-segmentation-pipeline (>=0.1.0, <=1.0.0), abdomenatlas (>=0.1.0, <=0.1.1) +38 more potentially affected by unknown CVE via monai (>=1.0.0, <=1.5.2)

monai PYPI version =1.0.0, =0.1.0, =0.1.0, =0.0.1, =1.0.0rc1, =0.0.1, =0.1.5, =0.0.5, =0.1.5, =0.0.3, =6.0.0rc1, =0.1.1, =1.0.1a4, =1.0.1a5 and more Source cves: unknown CVE Source advisory: GHSA-89GG-P5R5-Q6R4...

magms (>=1.1.0, <=2.0.2) potentially affected by CVE-2026-100846 via monai (0.9.1)

monai PYPI version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - magms =1.1.0, =2.0.2 Source cves: CVE-2026-100846 Source advisory: OSV:GHSA-89GG-P5R5-Q6R4...

deep-labelprop (0.1.0), monailabel-weekly (0.1.0.dev2128) +2 more potentially affected by CVE-2026-100846 via monai (0.6.0)

monai PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - deep-labelprop 0.1.0 - monailabel-weekly 0.1.0.dev2128 - p-mod-api 0.0.2 - p2022 0.0.4 Source cves: CVE-2026-100846 Source advisory:...