Skip to content
OpenAdvisories

Vendor

Project-MONAI

17 known vulnerabilities.

Products

MONAI 17
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-118684

    MONAI before 1.6.1 Missing Integrity Verification via check_hash in Downloads

    MONAI before 1.6.1 contains an insufficient integrity verification vulnerability in check_hash() that silently returns True when hash_val is None, with MD5 as the default hash type. Attackers performing man-in-the-middle or registry compromise can substitute …

    Project-MONAI MONAI
  • Medium 5.3
    CVE-2026-21851

    MONAI has Path Traversal (Zip Slip) in NGC Private Bundle Download

    MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. In versions up to and including 1.5.1, a Path Traversal (Zip Slip) vulnerability exists in MONAI's `_download_from_ngc_private()` function. The function uses `zipfile.ZipFile.extrac…

    Project-MONAI MONAI monai PyPI