dcmjs: DS/IS VALUE REPRESENTATION INPUT VALIDATION BYPASS

Description

dcmjs, a JavaScript library for DICOM manipulation used in web-based medical imaging viewers, contains an input validation bypass in its handling of DS (Decimal String) and IS (Integer String) value representations.

Recommendation

Update the dcmjs package to the latest compatible version. Followings are version details:

Affected version(s): < 0.52.0
Patched version(s): 0.52.0

References

GHSA-px68-xx5g-48q5
CVE-2026-46350
CWE-20
CAPEC-310

Could your website be exposed too?

SmartScanner can check your website for dcmjs: DS/IS VALUE REPRESENTATION INPUT VALIDATION BYPASS and gives you actionable findings to investigate.

Start a free scan

Related Issues

Saltcorn: Open Redirect in `POST /auth/login` due to incomplete `is_relative_url` validation (backslash bypass) - CVE-2026-42259
Qwik City has a CSRF Protection Bypass via Content-Type Header Validation - CVE-2026-25151
@langchain/community affected by SSRF Bypass in RecursiveUrlLoader via insufficient URL origin validation - CVE-2026-26019
Feathers has an origin validation bypass via prefix matching - CVE-2026-27192

Apache and Express Path Traversal plus Nginx Restriction Bypass Tests with SmartScanner

10 Secure Coding Best Practices to Follow in Every Project

Update Cheat Sheet for Developers

See something that needs correcting? Let us knowUpdated October 27, 2026