DICOM Web Viewer Framework vulnerabilities

1 known vulnerability in DICOM Web Viewer Framework from Open Health Imaging Foundation (OHIF). 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  DICOM Web Viewer Framework: Server-Side Request Forgery

  CVE-2026-12473Jun 25, 2026Open Health Imaging Foundation (OHIF)

  Two data sources (DICOMWebProxy and DICOMJSON) shipped in the default configuration fetch an arbitrary URL parameter without validation. A global authentication service in OHIF automatically injects the authenticated user's OIDC Bearer token into the resulting