1vulnerability
- Critical0 (0.0%)
- High1 (100.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
ohif-extension-dicom-pdf
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 1HighAffects 3 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 1 vulnerabilities
- Critical: 0
- High: 1
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting ohif-extension-dicom-pdf, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| GHSA-xwgp-w3pj-q5h3 | High | OHIF Viewers: DOM-Based Cross Site Scripting (XSS) through MIME type of document### Summary An XSS (Cross-Site Scripting) vulnerability occurs when an attacker is able to inject their own JavaScript code into a web page's source, which is subsequently processed by the victim's browser. A common cause of this vulnerability is the failure to validate user-supplied data before displaying it within the vulnerable application without proper filtering. To exploit the vulnerability, an attacker must input HTML code into a vulnerable parameter containing structures that trigger the execution of JavaScript. The DOM XSS variant occurs when user-supplied data is processed by a clien |
| GitHub (opens in a new tab) |
- GHSA-xwgp-w3pj-q5h3HighOHIF Viewers: DOM-Based Cross Site Scripting (XSS) through MIME type of document
>= 3.5.0-beta.0, < 3.12.18>= 3.13.0-beta.0, < 3.13.10- +1 more
Affected versions:>= 3.5.0-beta.0, < 3.12.18>= 3.13.0-beta.0, < 3.13.10>= 3.14.0-beta.0, < 3.14.0-beta.36
### Summary An XSS (Cross-Site Scripting) vulnerability occurs when an attacker is able to inject their own JavaScript code into a web page's source, which is subsequently processed by the victim's browser. A common cause of this vulnerability is the failure to validate user-supplied data before displaying it within the vulnerable application without proper filtering. To exploit the vulnerability, an attacker must input HTML code into a vulnerable parameter containing structures that trigger the execution of JavaScript. The DOM XSS variant occurs when user-supplied data is processed by a clien
CVE: CVE-2026-118670