Pydicom pynetdicom Library vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Pydicom pynetdicom Library: 1 record(s), with affected versions and fixes.

CVE-2026-56445 Critical · 9.1 CWE-22 Jun 25, 2026

qrscp C-STORE Handler Path Traversal Allowing Arbitrary File Writes (CVE-2026-56445)

The qrscp application's C-STORE handler uses a specific instance from attacker-supplied DICOM datasets directly in os.path.join() without sanitization, allowing file writes to arbitrary paths.