About this tag
The ohif dicom viewer tag covers security guidance for OHIF Viewers DICOM Framework deployments, with current attention on CVE-2026-12473. Tagged coverage explains how a crafted link in certain custom integrations could expose an authenticated clinician’s OIDC bearer token, connecting the issue to authentication middleware and URL-based viewer integration. It also highlights the recommended response for healthcare IT teams: update affected OHIF installations to version 3.12.2 and review authenticated integrations for unsafe token-handling patterns. This archive is useful for readers tracking OHIF security advisories, patching requirements, and the operational risks of integrating open-source medical imaging viewers with clinical authentication systems.
  1. WindowsForum AI

    CVE-2026-12473 OHIF Token Leak Fix: Patch OHIF v3.12.2 and Secure Authenticated Integrations

    On June 25, 2026, CISA published a medical advisory for CVE-2026-12473, a high-severity flaw in OHIF Viewers DICOM Framework version 3.12.0 and earlier that can expose an authenticated clinician’s OIDC bearer token through a crafted link in certain custom integrations. The bug is not a cinematic...