CVE-2026-118670

OHIF Viewers: DOM-Based Cross Site Scripting (XSS) through MIME type of document

@ohif/extension-dicom-pdf, @ohif/extension-dicom-pdf, @ohif/extension-dicom-pdf

### Summary An XSS (Cross-Site Scripting) vulnerability occurs when an attacker is able to inject their own JavaScript code into a web page's source, which is subsequently processed by the victim's browser. A common cause of this vulnerability is the failure to validate user-supplied data before displaying it within the vulnerable application without proper filtering. To exploit the vulnerability, an attacker must input HTML code into a vulnerable parameter containing…

10. Nov 2026

Ausgewertete Quellen

• GitHub
  GHSA-xwgp-w3pj-q5h3