GHSA-wg9g-w2j2-8pgr: MONAI: Unsafe deserialization in NumpyReader allows arbitrary code execution via malicious .npy files

The `NumpyReader` class in MONAI uses `np.load()` with `allow_pickle=True` (a setting that lets Python execute code hidden in data files) hardcoded, allowing attackers to run arbitrary code by distributing malicious `.npy` or `.npz` files. This vulnerability affects all MONAI versions and cannot be overridden by users, since the code explicitly prevents the `allow_pickle` parameter from being changed.