Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Project-MONAI MONAI 1.6.1 Clear all filters
TI-2026-82172 CVE-2026-118684 · GHSA-59gw-w64r-2mg7

Missing integrity check in MONAI downloads accepts unverified files

Priority HIGH 69

MONAI before 1.6.1 contains an insufficient integrity verification vulnerability in check_hash() that silently returns True when hash_val is None, with MD5 as the default hash type.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00185 Published 2026-10-28 Fixed in 1.6.1 CWE-327
TI-2026-82171 CVE-2026-118683 · GHSA-475h-4rfw-9899

Code execution in MONAI through bundle logging.conf files

Priority MEDIUM 40

MONAI from 1.2.0 before 1.6.1 contains a remote code execution vulnerability in ConfigWorkflow.__init__, which passes a bundle's configs/logging.conf to logging.config.fileConfig that eval()s handler class and args field…

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00486 Published 2026-10-28 Fixed in 1.6.1 CWE-94