pydicom

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

pydicom records in CISA KEV

No pydicom vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pydicom 1 record HIGH

Records

2 records

TI-2026-25203 CVE-2026-32711 · GHSA-v856-2rf8-9f28

pydicom: Path traversal in FileSet/DICOMDIR ReferencedFileID allows file access outside the File-set root

HIGH 69

pydicom is a pure Python package for working with DICOM files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00296 Published 2026-03-20 Fixed in 3.0.2, 2.4.5 CWE-22

TI-2026-40784 CVE-2026-56445 · GHSA-f3pc-ww42-cwqp

pydicom pynetdicom Library Path Traversal

MEDIUM 47

The qrscp application's C-STORE handler uses a specific instance from attacker-supplied DICOM datasets directly in os.path.join() without sanitization, allowing file writes to arbitrary paths.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0064 Published 2026-06-25 No fix listed CWE-22

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0