Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

monai

12 known vulnerabilities (1 critical, 10 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
1.6.1 (Sep 27, 2026): no advisory with comparable ranges affects it; 1 advisory (CVE-2026-100841) can't be checked against versions
Newest unaffected release
1.6.1 (Sep 27, 2026), the latest release, not counting 1 advisory without comparable ranges
Advisories
12 · 1 critical, 10 high, 1 medium
Weekly downloads
90.3K
Dependents
128
Releases
46 since 0.0.1 (Mar 26, 2020)
Registry
PyPI
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 12

  • CVE-2026-48705Critical 9.3

    MONAI: MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)

    Affected: fixed in 1.6.1.

    Fixed in 1.6.1 (released Sep 27, 2026, 39 days before disclosure).

    The latest release, 1.6.1, is not affected.

  • MONAI before 1.5.2 Remote Code Execution via Pickle Deserialization

    Affected: fixed in 1.6.0; fixed in 1.5.2.

    Fixed in 1.6.0 (released Jun 22, 2026, 97 days before disclosure).

    The latest release, 1.6.1, is not affected.

  • MONAI before 1.6.0 Remote Code Execution via NumpyReader

    Affected: fixed in 1.6.0.

    Fixed in 1.6.0 (released Jun 22, 2026, 97 days before disclosure).

    The latest release, 1.6.1, is not affected.

  • MONAI before 1.6.0 OS Command Injection via dataset_name_or_id

    Affected: fixed in 1.6.0.

    Fixed in 1.6.0 (released Jun 22, 2026, 97 days before disclosure).

    The latest release, 1.6.1, is not affected.

  • MONAI before 1.6.0 Remote Code Execution via algo_from_pickle

    Affected: fixed in 1.6.0.

    Fixed in 1.6.0 (released Jun 22, 2026, 97 days before disclosure).

    The latest release, 1.6.1, is not affected.

  • MONAI through 1.6.0 _get_fake_spatial_shape eval() Sandbox Bypass via Attribute Chains

    Affected: fixed in 1.6.1rc0.

    Fixed in 1.6.1rc0 (released Sep 18, 2026, 9 days before disclosure).

    The latest release, 1.6.1, is not affected.

  • MONAI through 1.6.0 PersistentDataset Remote Code Execution via Pickle Cache

    Affected: through 1.6.0-NA.

  • MONAI through 1.6.0 Remote Code Execution via bundle configuration

    Affected: fixed in 1.6.1rc0.

    Fixed in 1.6.1rc0 (released Sep 18, 2026, 9 days before disclosure).

    The latest release, 1.6.1, is not affected.

  • CVE-2026-21851Medium 5.3

    MONAI has Path Traversal (Zip Slip) in NGC Private Bundle Download

    Affected: fixed in 1.5.2.

    Fixed in 1.5.2 (released Jan 27, 2026, 20 days after disclosure).

    The latest release, 1.6.1, is not affected.

  • MONAI's unsafe use of Pickle deserialization may lead to RCE

    Affected: fixed in 1.5.1rc1; fixed in 1.5.1.

    Fixed in 1.5.1 (released Sep 22, 2025, 14 days after disclosure).

    The latest release, 1.6.1, is not affected.

  • MONAI's unsafe torch usage may lead to arbitrary code execution

    Affected: fixed in 1.5.1; fixed in 1.5.1rc1.

    Fixed in 1.5.1 (released Sep 22, 2025, 14 days after disclosure).

    The latest release, 1.6.1, is not affected.

  • MONAI has path traversal issue that may lead to arbitrary file writes

    Affected: fixed in 1.5.1rc1; fixed in 1.5.1.

    Fixed in 1.5.1 (released Sep 22, 2025, 14 days after disclosure).

    The latest release, 1.6.1, is not affected.