{"action":"Upgrade monai to 1.5.1rc1 or later.","affected":[{"fixed":"1.5.1rc1","introduced":"0"}],"component":"monai","cve_ids":["CVE-2025-58755"],"ecosystem":"PyPI","epss":0.00623,"exploited":false,"fixed_versions":["1.5.1rc1"],"ghsa_id":"GHSA-x6ww-pf9m-m73m","id":"tcs_01M5KGNTPQF6Z5CKXGATTGD65H","modified_at":"2026-05-20T09:19:08.643556Z","published_at":"2025-09-09T00:15:32.257Z","references":["https://osv.dev/vulnerability/PYSEC-2025-140","https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-x6ww-pf9m-m73m"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"PYSEC-2025-140","url":"https://osv.dev/vulnerability/PYSEC-2025-140"}],"summary":"MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. The extractall function `zip_file.extractall(output_dir)` is used directly to process compressed files. It is used in many"}