Open Health Imaging Foundation (OHIF) vulnerabilities
We track 1 vulnerability in Open Health Imaging Foundation (OHIF) products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 25, 2026.
1vulnerabilities
0critical
1high
0exploited
8.2average CVSS score
Latest Open Health Imaging Foundation (OHIF) vulnerabilities
- 8.2 High severity
DICOM Web Viewer Framework: Server-Side Request Forgery
Two data sources (DICOMWebProxy and DICOMJSON) shipped in the default configuration fetch an arbitrary URL parameter without validation. A global authentication service in OHIF automatically injects the authenticated user's OIDC Bearer token into the resulting