Security Advisories

[ericspod]

There are a number of open advisories in https://github.com/Project-MONAI/MONAI/security/advisories which should be addressed before the release. Many look like duplicates of existing advisories or issues that have been addressed already.

• Warn before instantiating _target_ from algo_object.json #9085
• Harden nnUNetV2Runner against code execution #9086
• Reject non-finite DICOM affine metadata in PydicomReader #9087
• Harden download/deserialize integrity (weights_only, hash checks, path confinement) #9088
• Security Advisories, should open as draft when addressed then publish when 1.6.1 is released
• CodeQL flagged issues: https://github.com/Project-MONAI/MONAI/security/code-scanning