https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 08:28:11 +0000 https://cve.radiocsirt.org/vuln/cve-2026-12473 <p><strong>Affected:</strong> Open Health Imaging Foundation (OHIF) DICOM Web Viewer Framework</p> <p>Two data sources (DICOMWebProxy and DICOMJSON) shipped in the default configuration fetch an arbitrary URL parameter without validation. A global authentication service in OHIF automatically injects the authenticated user&#39;s OIDC Bearer token into the resulting requests, sending it to the attacker-controlled server. DICOMweb data sources are not impacted.</p> <p><strong>Affected:</strong> Open Health Imaging Foundation (OHIF) DICOM Web Viewer Framework</p> <p>Two data sources (DICOMWebProxy and DICOMJSON) shipped in the default configuration fetch an arbitrary URL parameter without validation. A global authentication service in OHIF automatically injects the authenticated user&#39;s OIDC Bearer token into the resulting requests, sending it to the attacker-controlled server. DICOMweb data sources are not impacted.</p> https://cve.radiocsirt.org/vuln/cve-2026-12473