CVE-2026-118670 - OHIF Viewers: DOM-Based Cross Site Scripting (XSS) through MIME type of document
CVE ID :CVE-2026-118670 Published : Nov. 6, 2026, 6:17 p.m. | 54 minutes ago Description :OHIF Viewers is a zero-footprint DICOM viewer with shared extension packages. From 3.5.0-beta.0 until 3.12.15, 3.13.7, and 3.14.0-beta.19, the dicom-pdf extension reads the attacker-controlled...