Skip to content
OpenAdvisories

Package · PyPI

monai

12 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    MONAI has Path Traversal (Zip Slip) in NGC Private Bundle Download

    MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. In versions up to and including 1.5.1, a Path Traversal (Zip Slip) vulnerability exists in MONAI's `_download_from_ngc_private()` function. The function uses `zipfile.ZipFile.extrac…