GHSA-wg9g-w2j2-8pgr
7.8 · High
Code execution in MONAI through pickled NumPy files read by NumpyReader
MONAI’s NumpyReader loaded .npy and .npz files with allow_pickle=True, so a poisoned file in a medical imaging dataset ran code on load.
Vulnerability class
Deserialisation
Formats that run code when loaded, such as pickle.
1 write-up, 1 vulnerability
Vulnerabilities
| Identifier | Product | Vulnerability | CVSS | Published |
|---|---|---|---|---|
| GHSA-wg9g-w2j2-8pgr | MONAI | Unsafe deserialisation in NumpyReader | 7.8 High |