GHSA-qxq5-qhx6-94qw: Incomplete Fix in MONAI: algo_from_pickle() pickle.loads() RCE still present in v1.5.2 despite GHSA-89gg-p5r5-q6r4 claiming patch

August 18, 2026

GHSA-89gg-p5r5-q6r4 claims the pickle deserialization vulnerability in algo_from_pickle() was fixed in v1.5.2. However, monai/auto3dseg/utils.py has not been modified since 2024-07-12 — 18 months before v1.5.2 was released (2026-01-29). All three pickle.loads() calls remain unchanged. The fix was never implemented.

References

github.com/Project-MONAI/MONAI/releases/tag/1.6.0
github.com/Project-MONAI/MONAI/security/advisories/GHSA-qxq5-qhx6-94qw
github.com/advisories/GHSA-89gg-p5r5-q6r4
github.com/advisories/GHSA-qxq5-qhx6-94qw

Code Behaviors & Features

Detect and mitigate GHSA-qxq5-qhx6-94qw with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →