[GHSA] GHSA-wg9g-w2j2-8pgr (high) — MONAI: Unsafe deserialization in NumpyReader allows arbitrary code execution via malicious .npy files

GHSA-wg9g-w2j2-8pgr Severity: high CVE: None

MONAI: Unsafe deserialization in NumpyReader allows arbitrary code execution via malicious .npy files

### Summary

The `NumpyReader` class in `monai/data/image_reader.py` unconditionally uses `np.load(name, allow_pickle=True)` (line 1276), enabling arbitrary code execution when loading a crafted `.npy` or `.npz` file. This affects all MONAI versions u