GHSA-qxq5-qhx6-94qw: Incomplete Fix in MONAI: algo_from_pickle() pickle.loads() RCE still present in v1.5.2 despite GHSA-89gg-p5r5-q6r4 claiming patch

August 18, 2026

GHSA-89gg-p5r5-q6r4 claims the pickle deserialization vulnerability in algo_from_pickle() was fixed in v1.5.2. However, monai/auto3dseg/utils.py has not been modified since 2024-07-12 — 18 months before v1.5.2 was released (2026-01-29). All three pickle.loads() calls remain unchanged. The fix was never implemented.

References

github.com/Project-MONAI/MONAI/releases/tag/1.6.0
github.com/Project-MONAI/MONAI/security/advisories/GHSA-qxq5-qhx6-94qw
github.com/advisories/GHSA-89gg-p5r5-q6r4
github.com/advisories/GHSA-qxq5-qhx6-94qw

Code Behaviors & Features

Detect and mitigate GHSA-qxq5-qhx6-94qw with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →