Threats tagged 'ghsa-4jj3-3266-2688'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.5	EPSS 0.2%	CVE-2026-100845MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses High8.5EPSS 0.2%2026-09-27GCVE DatabaseCVE-2026-100845 MONAI versions prior to 1.6.0 have an unsafe deserialization vulnerability in the NumpyReader class. This class uses numpy.load with allow_pickle=True unconditionally when loading .npy and .npz files. Maliciously crafted .npy files containing pickle payloads can execute arbitrary code during loading in MONAI's data pipeline. EPSS 0.2%Report on CVE-2026-100845 Vulnerability CWE-502 #ghsa-4jj3-3266-2688	GCVE Database	2026-09-27

Page 1 of 1