Vulnerabilities in MONAI

[landynfrancis]

A couple days ago, these vulnerabilities started showing up in pip-audit. Is there a plan to fix these?

GHSA-x6ww-pf9m-m73m

GHSA-6vm5-6jv9-rjpj

GHSA-p8cm-mm2v-gwjm

Thanks,

[ericspod]

These are being worked on right now and will be addressed for an upcoming release.

[landynfrancis]

Splendid, thank you!

[ericspod]

Fixes for these three vulnerabilities have just been merged into dev. We will have a release shortly to include these and other work in MONAI 1.5.1.

[ericspod]

These issues have now been addressed with the 1.5.1 release.

[jamesobutler]

@ericspod The advisories such as GHSA-x6ww-pf9m-m73m still show no version available. Will these soon be marked as saying version 1.5.1 and later fixed the issue?

[MattTheCuber]

@jamesobutler Looks like it is updated now.