catalog / Healthcare / nnU-Net — Self-Configuring Medical Segmentation
⬡PipelineHealthcareFree
nnU-Net — Self-Configuring Medical Segmentation
DKFZ's Apache-2.0 framework that automatically configures a U-Net for any medical image segmentation dataset — state-of-the-art results with zero manual tuning.
scanned 16d ago·osv · gitleaks · opengrep · picklescan + heuristics·full breakdown in the Security tab ↓
nnU-Net — Self-Configuring Medical Image Segmentation
nnU-Net (no-new-net) is a self-configuring deep learning framework for medical image segmentation from the German Cancer Research Center (DKFZ). Feed it any labelled 3D medical dataset and it automatically determines optimal preprocessing, network topology, training scheme, and post-processing — consistently achieving top results in biomedical segmentation challenges (over 30 MICCAI competition wins).
✓ Security: Safe · 100100/100 · grade Ascanned 16d ago
✓ no compromise signals12 risk-surface · 6/20 OWASP controls flagged
Compromise signals — malicious or tampered code (leaked secrets, backdoors, a dropped executable) — reduce the score, and known dependency CVEs carry a bounded penalty (they warrant review but never QUARANTINE — update the dependency to clear). Other dangerous-by-capability traits are risk surface, expected for some capabilities. Every finding is mapped to its OWASP control below.
What this capability can do · med confidence (static)
Findings mapped to the OWASP Top 10 for LLM Applications (2025) and the OWASP Machine Learning Security Top 10. Expand any flagged control for the exact findings — compromise reduces the score; expected/risk-surface do not, except a known CVE, which carries a small bounded penalty (high/critical → Review).
OWASP Top 10 for LLM Applications
⚠LLM01Prompt Injectionhigh
Adversarial instructions embedded in an artifact that hijack a downstream LLM.
•Prompt-injection phrasing — instruction-subversion language detected · MIC-DKFZ-nnUNet-27f878d/.github/workflows/issue-agent.yml (CWE-77)risk surface
⚠LLM05Improper Output Handlingmedium
Code that pipes model/user output into shell, eval, SQL or paths unsafely.