GHSA-wg9g-w2j2-8pgr: MONAI: Unsafe deserialization in NumpyReader allows arbitrary code execution via malicious .npy files

The NumpyReader class in monai/data/image_reader.py unconditionally uses np.load(name, allow_pickle=True) (line 1276), enabling arbitrary code execution when loading a crafted .npy or .npz file. This affects all MONAI versions up to and including the latest commit (5b71547). The allow_pickle parameter is hardcoded to True and cannot be overridden by the user (the docstring explicitly states kwargs are accepted “except allow_pickle”).