CVE-2026-118670 | OHIF Viewers up to 3.12.14/3.13.6/3.14.0-beta.18 dicom-pdf extension getSopClassHandlerModule.js MIMETypeOfEncapsulatedDocument cross site scripting

A vulnerability described as problematic has been identified in OHIF Viewers up to 3.12.14/3.13.6/3.14.0-beta.18. Impacted is an unknown function of the file extensions/dicom-pdf/src/getSopClassHandlerModule.js of the component dicom-pdf extension. Executing a manipulation of the argument MIMETypeOfEncapsulatedDocument can lead to cross site scripting.

This vulnerability is tracked as CVE-2026-118670. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More