Advisories · Technology
MONAI.
Every CVE that names MONAI among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.5 High
MONAI 1.6.0 before 1.6.1 Code Execution via Auto3DSeg algo_from_json()
- MONAI
- Code injection
- CVSS 8.2 High
MONAI before 1.6.1 Missing Integrity Verification via check_hash in Downloads
- MONAI
- Weak cryptography or TLS
- CVSS 8.6 High
MONAI 1.2.0 before 1.6.1 Code Execution via bundle configs/logging.conf
- MONAI
- Code injection
- CVSS 7.0 High
MONAI 1.2.0 before 1.6.1 Insecure Deserialization RCE via nnUNetV2Runner postprocessing_file Path
- MONAI
- Insecure deserialization
- CVSS 7.7 High
MONAI 0.4.0 before 1.6.1 RCE via SENet Pretrained Weights Over Plaintext HTTP
- MONAI
- Insecure deserialization