Monai vulnerabilities
We track 3 vulnerabilities in Monai products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 9, 2025.
Latest Monai vulnerabilities
- 8.8 High severity
MONAI: Deserialization of Untrusted Data
MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. In versions up to and including 1.5.0, the `pickle_operations` function in `monai/data/utils.py` automatically handles dictionary key-value pairs ending with a specific suffix and de
- 8.8 High severity
MONAI: Deserialization of Untrusted Data
MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. In versions up to and including 1.5.0, in `model_dict = torch.load(full_path, map_location=torch.device(device), weights_only=True)` in monai/bundle/scripts.py , `weights_only=True`
- 8.8 High severity
MONAI: Improper Limitation of a Pathname to a Restricted Directory
MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. The extractall function `zip_file.extractall(output_dir)` is used directly to process compressed files. It is used in many places in the project. In versions up to and including 1.5.