MONAI does not prevent path traversal, potentially leading to arbitrary file writes

Summary The extractall function zipfile.extractalloutputdir is used directly to process compressed files. It is used in many places in the project. When the Zip file containing malicious content is decompressed, it will overwrite the system files. In addition, the project allows the download of t...

deep-labelprop (1.1.1), fastmonai (>=0.1.0, <=0.1.4) +5 more potentially affected by CVE-2025-58755 via monai (0.8.1)

monai PYPI version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - deep-labelprop 1.1.1 - fastmonai =0.1.0, =0.0.2, =0.0.3, =0.4.0.dev2201, =0.4.0.dev2208 Source cves: CVE-2025-58755 Source advisory:...

monailabel (0.4.1), monailabel-weekly (0.4.0.dev2228) +2 more potentially affected by CVE-2025-58755 via monai (0.9.0)

monai PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - monailabel 0.4.1 - monailabel-weekly 0.4.0.dev2228 - neurips-cellseg-gc =0.0.1, =0.1.5, =0.1.10 Source cves: CVE-2025-58755 Source advisory:...

magms (>=1.1.0, <=2.0.2) potentially affected by CVE-2025-58755 via monai (0.9.1)

monai PYPI version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - magms =1.1.0, =2.0.2 Source cves: CVE-2025-58755 Source advisory: OSV:GHSA-X6WW-PF9M-M73M...

2404-segmentation-pipeline (>=0.1.0, <=1.0.0), abdomenatlas (>=0.1.0, <=0.1.1) +34 more potentially affected by CVE-2025-58755 via monai (>=1.0.0, <=1.5.0)

monai PYPI version =1.0.0, =0.1.0, =0.1.0, =0.0.1, =1.0.0rc1, =0.0.1, =0.1.5, =0.0.5, =0.1.5, =0.0.3, =6.0.0rc1, =0.1.1, =1.0.1a4, =0.0.18.dev20240127, =0.1.6.dev20260211 and more Source cves: CVE-2025-58755 Source advisory: GHSA-X6WW-PF9M-M73M...

2404-segmentation-pipeline (>=0.1.0, <=1.0.0), abdomenatlas (>=0.1.0, <=0.1.1) +34 more potentially affected by CVE-2025-58755 via monai (>=1.0.0, <=1.5.0)

monai PYPI version =1.0.0, =0.1.0, =0.1.0, =0.0.1, =1.0.0rc1, =0.0.1, =0.1.5, =0.0.5, =0.1.5, =0.0.3, =6.0.0rc1, =0.1.1, =1.0.1a4, =0.0.18.dev20240127, =0.1.6.dev20260211 and more Source cves: CVE-2025-58755 Source advisory: OSV:GHSA-X6WW-PF9M-M73M...

2404-segmentation-pipeline (>=0.1.0, <=1.0.0), abdomenatlas (>=0.1.0, <=0.1.1) +34 more potentially affected by CVE-2025-58755 via monai (>=1.0.0, <=1.5.0)

monai PYPI version =1.0.0, =0.1.0, =0.1.0, =0.0.1, =1.0.0rc1, =0.0.1, =0.1.5, =0.0.5, =0.1.5, =0.0.3, =6.0.0rc1, =0.1.1, =1.0.1a4, =0.0.18.dev20240127, =0.1.6.dev20260211 and more Source cves: CVE-2025-58755 Source advisory: SNYK:PYTHON-MONAI-12670016...

fedbiomed-cli (>=0.1.2, <=0.1.8) potentially affected by CVE-2025-58755 via monai (0.4.0)

monai PYPI version 0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - fedbiomed-cli =0.1.2, =0.1.8 Source cves: CVE-2025-58755 Source advisory: OSV:GHSA-X6WW-PF9M-M73M...

autorad (0.1.2), monailabel (0.3.0) +2 more potentially affected by CVE-2025-58755 via monai (0.8.0)

monai PYPI version 0.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - autorad 0.1.2 - monailabel 0.3.0 - monailabel-weekly =0.3.0.dev2150, =0.1.2, =0.1.4 Source cves: CVE-2025-58755 Source advisory: OSV:GHSA-X6WW-PF9M-M7...

deep-labelprop (0.1.0), monailabel-weekly (0.1.0.dev2128) +2 more potentially affected by CVE-2025-58755 via monai (0.6.0)

monai PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - deep-labelprop 0.1.0 - monailabel-weekly 0.1.0.dev2128 - p-mod-api 0.0.2 - p2022 0.0.4 Source cves: CVE-2025-58755 Source advisory:...

monailabel (>=0.2.0rc2, <=0.2.0), monailabel-weekly (>=0.3.0.dev2139, <=0.3.0.dev2147) +1 more potentially affected by CVE-2025-58755 via monai (0.7.0)

monai PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - monailabel =0.2.0rc2, =0.3.0.dev2139, =0.1.0, =0.1.1 Source cves: CVE-2025-58755 Source advisory: OSV:GHSA-X6WW-PF9M-M73M...

magms (>=1.1.0, <=2.0.2) potentially affected by CVE-2025-58757 via monai (0.9.1)

monai PYPI version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - magms =1.1.0, =2.0.2 Source cves: CVE-2025-58757 Source advisory: OSV:PYSEC-2025-142...

CVE-2025-58755

MONAI Medical Open Network for AI is an AI toolkit for health care imaging. The extractall function zipfile.extractalloutputdir is used directly to process compressed files. It is used in many places in the project. In versions up to and including 1.5.0, when the Zip file containing malicious...

CVE-2025-58757

MONAI Medical Open Network for AI is an AI toolkit for health care imaging. In versions up to and including 1.5.0, the pickleoperations function in monai/data/utils.py automatically handles dictionary key-value pairs ending with a specific suffix and deserializes them using pickle.loads . This...

CVE-2025-58756

MONAI Medical Open Network for AI is an AI toolkit for health care imaging. In versions up to and including 1.5.0, in modeldict = torch.loadfullpath, maplocation=torch.devicedevice, weightsonly=True in monai/bundle/scripts.py , weightsonly=True is loaded securely. However, insecure loading method...

PYSEC-2025-141

MONAI Medical Open Network for AI is an AI toolkit for health care imaging. In versions up to and including 1.5.0, in modeldict = torch.loadfullpath, maplocation=torch.devicedevice, weightsonly=True in monai/bundle/scripts.py , weightsonly=True is loaded securely. However, insecure loading method...

PYSEC-2025-140

MONAI Medical Open Network for AI is an AI toolkit for health care imaging. The extractall function zipfile.extractalloutputdir is used directly to process compressed files. It is used in many places in the project. In versions up to and including 1.5.0, when the Zip file containing malicious...

PYSEC-2025-142

MONAI Medical Open Network for AI is an AI toolkit for health care imaging. In versions up to and including 1.5.0, the pickleoperations function in monai/data/utils.py automatically handles dictionary key-value pairs ending with a specific suffix and deserializes them using pickle.loads . This...

deep-labelprop (1.1.1), fastmonai (>=0.1.0, <=0.1.4) +5 more potentially affected by CVE-2025-58755 via monai (0.8.1)

monai PYPI version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - deep-labelprop 1.1.1 - fastmonai =0.1.0, =0.0.2, =0.0.3, =0.4.0.dev2201, =0.4.0.dev2208 Source cves: CVE-2025-58755 Source advisory: OSV:PYSEC-2025-14...

deep-labelprop (1.1.1), fastmonai (>=0.1.0, <=0.1.4) +5 more potentially affected by CVE-2025-58757 via monai (0.8.1)

monai PYPI version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on monai and may be impacted: - deep-labelprop 1.1.1 - fastmonai =0.1.0, =0.0.2, =0.0.3, =0.4.0.dev2201, =0.4.0.dev2208 Source cves: CVE-2025-58757 Source advisory: OSV:PYSEC-2025-14...