PT-2026-99462

Name of the Vulnerable Software and Affected Versions MONAI versions prior to 1.6.1 Description An eval injection exists in the get fake spatial shape function within monai/bundle/scripts.py. The function uses a helper to validate shape expressions by walking the Abstract Syntax Tree AST and only...