2404-segmentation-pipeline (>=0.1.0, <=1.0.0), abdomenatlas (>=0.1.0, <=0.1.1) +48 more potentially affected by CVE-2025-58755 via monai (>=0.4.0, <=1.5.0)

monai PYPI version =0.4.0, =0.1.0, =0.1.0, =0.0.1, =1.0.0rc1, =0.0.1, =0.1.5, =0.1.0, =0.0.5, =0.1.0, =0.0.3, =6.0.0rc1, =0.1.2, =0.1.8 and more Source cves: CVE-2025-58755 Source advisory: MEND:CVE-2025-58755...

CVE-2025-58757

creationtimestamp| type| source ---|---|--- 2025-09-08 17:40:17+00:00| published-proof-of-concept| https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-p8cm-mm2v-gwjm...

PT-2025-36531

Name of the Vulnerable Software and Affected Versions: MONAI versions prior to 1.5.1 Description: MONAI Medical Open Network for AI is an AI toolkit for health care imaging. The extractall function zip file.extractalloutput dir is used directly to process compressed files throughout the project...

PT-2025-36532

Name of the Vulnerable Software and Affected Versions: MONAI versions up to and including 1.5.0 Description: MONAI is an AI toolkit for health care imaging. The software contains insecure model loading methods that can trigger a deserialization vulnerability, potentially leading to code execution...

PT-2025-36533

Name of the Vulnerable Software and Affected Versions: MONAI versions up to and including 1.5.0 Description: MONAI Medical Open Network for AI is an AI toolkit for health care imaging. The pickle operations function in monai/data/utils.py automatically handles dictionary key-value pairs ending wi...