CVE-2022-40897

Advisory

Monai-generative version 0.2.0 upgrades its setuptools requirement to versions greater than 65.5.0 but less than 66.0.0. This adjustment is in response to the security vulnerability CVE-2022-40897, moving away from the broader previous range of >=50.3.0 to <66.0.0, excluding version 60.6.0.
https://github.com/Project-MONAI/GenerativeModels/pull/360/commits/09a95e4a5b313b4854c837b675b240c7f39226c9

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed
* Adds likelihood computation by marksgraham in https://github.com/Project-MONAI/GenerativeModels/pull/122
* Add classifier-free guidance tutorial by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/131
* Add missing scale by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/147
* Fix 2d-ldm-tutorial. by JessyD in https://github.com/Project-MONAI/GenerativeModels/pull/151
* Add 3d percetual loss by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/158
* Adds inpainting tutorials by marksgraham in https://github.com/Project-MONAI/GenerativeModels/pull/161
* Fix set_timesteps by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/163
* Add stable diffusion v2.0 x4 upscaler tutorial by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/148
* Added the MMD Metric and tests by danieltudosiu in https://github.com/Project-MONAI/GenerativeModels/pull/152
* Add v_prediction and update docstrings by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/165
* Add RadImageNet to Perceptual Loss by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/153
* Add option num_head_channels as Sequence by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/172
* Fix kernel_size in quant_conv and post_quant_conv layers by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/170
* Fix "medicalnet_..." network_type used with spatial_dims==2 by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/167
* Adds context error by marksgraham in https://github.com/Project-MONAI/GenerativeModels/pull/175
* Remove ununsed predict_epsilon by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/184
* Fix TestDiffusionSamplingInferer by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/180
* Add option to use residual blocks for updownsampling by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/176
* Optimise Attention Mechanisms by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/145
* Fix F.interpolate usage with bfloat16 by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/157
* Pretrained DDPM by marksgraham in https://github.com/Project-MONAI/GenerativeModels/pull/177
* Add full precision attention by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/189
* Add FID by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/40
* Update tests, CI and pre-commit by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/193
* Fix missing __init__.py by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/200
* Replace FeedForward with MLPBlock by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/201
* Remove python3.8 as default_language_version by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/209
* Refactor code with new pre commit configuration by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/207
* Fixes by marksgraham in https://github.com/Project-MONAI/GenerativeModels/pull/211
* Modify sample function to divide by scale factor before passing to th… by virginiafdez in https://github.com/Project-MONAI/GenerativeModels/pull/214
* Addition of is_fake_3d setting condition to error in PerceptualLoss by virginiafdez in https://github.com/Project-MONAI/GenerativeModels/pull/215
* Add verification code by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/221
* Suspend CI by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/224
* Sequence Ordering class by danieltudosiu in https://github.com/Project-MONAI/GenerativeModels/pull/168
* Add AutoregressiveTransformer by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/225
* Remove ch_mult from AutoencoderKL by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/220
* Fix print messages for MS-SSIM by JessyD in https://github.com/Project-MONAI/GenerativeModels/pull/230
* 228 update pretrained ddpm by marksgraham in https://github.com/Project-MONAI/GenerativeModels/pull/233
* WIP by OeslleLucena in https://github.com/Project-MONAI/GenerativeModels/pull/202
* Add annotations from __future__ by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/239
* Change num_res_blocks to Sequence[int] | int by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/238
* Change num_res_channels and num_channels to Sequence[int] | int by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/237
* Initialise inference_timesteps to train_timesteps by marksgraham in https://github.com/Project-MONAI/GenerativeModels/pull/240
* Fix eval mode for stage_2 by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/246
* Fix format by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/250
* Fix format by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/251
* Use no_grad decorator for sample method by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/244
* Add VQVAE + Transformer inferer by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/242
* Fix TypeError by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/254
* Harmonise VQVAE with AutoencoderKL by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/248
* Adds transformer get_likelihood by marksgraham in https://github.com/Project-MONAI/GenerativeModels/pull/257
* Changed PatchAdversarialLoss to allow for least-squares criterion to … by virginiafdez in https://github.com/Project-MONAI/GenerativeModels/pull/262
* 258 fix diffusion inferer by marksgraham in https://github.com/Project-MONAI/GenerativeModels/pull/265
* Fixes type by marksgraham in https://github.com/Project-MONAI/GenerativeModels/pull/264
* Change default values by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/267
* 106 vqvae transfomer tutorial by Ashayp31 in https://github.com/Project-MONAI/GenerativeModels/pull/236
* 203 add scale factor to the ldm training tutorials by virginiafdez in https://github.com/Project-MONAI/GenerativeModels/pull/271
* Mednist Bundle by ericspod in https://github.com/Project-MONAI/GenerativeModels/pull/263
* Add cache_dir by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/278
* Add option to use flash attention by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/222
* Set param.requires_grad = False by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/273
* Update loss imports by marksgraham in https://github.com/Project-MONAI/GenerativeModels/pull/279
* Add Brain LDM to model-zoo by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/188
* Fix 3D DDPM tutorial by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/277
* Add use_flash_attention argument by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/284
* Fixes transformer max_sequence_length training/inference by marksgraham in https://github.com/Project-MONAI/GenerativeModels/pull/282
* Add MIMIC pretrained model by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/286
* Fix validation data in tutorials by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/291
* Fix prediction_type="sample" by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/300
* Moving DiffusionPrepareBatch by ericspod in https://github.com/Project-MONAI/GenerativeModels/pull/305
* Change transformer number of tokens by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/303
* Add tutorial performing anomaly detection based on likelihoods from generative models by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/298
* Add causal self-attention block by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/218
* Remove TODOs by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/310
* Fix num_head_channels by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/316
* Update AutoencoderKL and add more content by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/315
* fixed typo in anomaly detection tutorial by vacmar01 in https://github.com/Project-MONAI/GenerativeModels/pull/321
* Fix generate function by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/322
* Clip image_data values before casting to uint8 by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/324
* 314 fix transformer training by marksgraham in https://github.com/Project-MONAI/GenerativeModels/pull/318
* Fix xtransformer error by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/327
* Update README.md by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/328
* 150 - Diff-scm by SANCHES-Pedro in https://github.com/Project-MONAI/GenerativeModels/pull/306
* Update tutorial by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/329
* Add README file to tutorial dir by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/330
* Add more content to tutorial by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/331
* Fix dependencies and license by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/332
* Update README.md by marksgraham in https://github.com/Project-MONAI/GenerativeModels/pull/333
* Update anomaly detection notebook by marksgraham in https://github.com/Project-MONAI/GenerativeModels/pull/334
* initial commit anomaly detection with gradient guidance by JuliaWolleb in https://github.com/Project-MONAI/GenerativeModels/pull/190
* Fix formatting by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/340
* fix transformer max_sequence_length by marksgraham in https://github.com/Project-MONAI/GenerativeModels/pull/335
* Fix typo by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/341
* Remove dependency on x transformers by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/325
* Add flash attention to Transformers by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/342
* Makes use of inferer classes for training and sampling by marksgraham in https://github.com/Project-MONAI/GenerativeModels/pull/347
* Fix MS-SSIM by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/348
* initial commit for segmentation with diffusion models by JuliaWolleb in https://github.com/Project-MONAI/GenerativeModels/pull/292
* Fix format by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/349
* Use double in FID computation by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/350
* Adopt exact computation of FID by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/355
* Fixing vulnerable version of setuptools by ericspod in https://github.com/Project-MONAI/GenerativeModels/pull/360
* Diffusion Autoencoder tutorial by SANCHES-Pedro in https://github.com/Project-MONAI/GenerativeModels/pull/361
* Fix typo by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/367
* Fix number of attention heads by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/369
* Update CXR model by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/336
* Add sample figures by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/370
* Fix CUDA device mismatch by ycremar in https://github.com/Project-MONAI/GenerativeModels/pull/371
* Fix grad strides warning when using ddp by marksgraham in https://github.com/Project-MONAI/GenerativeModels/pull/375
* Fix MMD Metric by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/368
* Add ControlNet by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/358
* Evaluate the performance of generative models (realism and diversity) by JessyD in https://github.com/Project-MONAI/GenerativeModels/pull/227
* Remove asserts by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/383
* Bump to version 0.2 by Warvito in https://github.com/Project-MONAI/GenerativeModels/pull/384

New Contributors
* OeslleLucena made their first contribution in https://github.com/Project-MONAI/GenerativeModels/pull/202
* Ashayp31 made their first contribution in https://github.com/Project-MONAI/GenerativeModels/pull/236
* ericspod made their first contribution in https://github.com/Project-MONAI/GenerativeModels/pull/263
* vacmar01 made their first contribution in https://github.com/Project-MONAI/GenerativeModels/pull/321
* JuliaWolleb made their first contribution in https://github.com/Project-MONAI/GenerativeModels/pull/190
* ycremar made their first contribution in https://github.com/Project-MONAI/GenerativeModels/pull/371

**Full Changelog**: https://github.com/Project-MONAI/GenerativeModels/compare/0.1.0...0.2.0

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40897