https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-58757.htmlhttps://patchthecve.com/cve/CVE-2025-58757.htmlWed, 17 Jun 2026 09:44:53 +0000HIGH 8.8: MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. In versions up to and including 1.5.0, the `pickle_operations` function in `monai/data/utils.py` automatically handles dictionary key-value pairs ending with a specific suffix and deserializes them using `pickle.loads()` .https://patchthecve.com/cve/CVE-2025-58756.htmlhttps://patchthecve.com/cve/CVE-2025-58756.htmlWed, 17 Jun 2026 09:44:53 +0000HIGH 8.8: MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. In versions up to and including 1.5.0, in `model_dict = torch.load(full_path, map_location=torch.device(device), weights_only=True)` in monai/bundle/scripts.py , `weights_only=True` is loaded securely. However, insecure lohttps://patchthecve.com/cve/CVE-2025-58755.htmlhttps://patchthecve.com/cve/CVE-2025-58755.htmlWed, 17 Jun 2026 09:44:52 +0000HIGH 8.8: MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. The extractall function `zip_file.extractall(output_dir)` is used directly to process compressed files. It is used in many places in the project. In versions up to and including 1.5.0, when the Zip file containing maliciou