aide-infra (>=0.3.1.2 <=0.3.9), aide-sdk (>=1.0.3 <=1.0.6) +122 more potentially affected by CVE-2026-32711 via pydicom (>=0.9.8 <=2.4.4)

pydicom PYPI version =0.9.8, =0.3.1.2, =1.0.3, =3.20.3.0.post3, =0.1.1, =3.0.0, =0.1.0, =0.0.1, =0.1.2, =0.1.0a1, =0.1.3, =0.4.0, =0.2.0, =1.1.0, =0.2.3, =0.2.4 and more Source cves: CVE-2026-32711 Source advisory: OSV:GHSA-V856-2RF8-9F28...

aide-infra (>=0.3.1.2 <=0.3.9), aide-sdk (>=1.0.3 <=1.0.6) +96 more potentially affected by CVE-2026-32711 via pydicom (>=2.0.0 <=2.4.4)

pydicom PYPI version =2.0.0, =0.3.1.2, =1.0.3, =0.1.1, =3.0.0, =0.1.0, =0.1.2, =0.1.0a1, =0.1.3, =0.4.0, =0.2.0, =1.1.0, =0.2.3, =0.0.13, =0.0.17 and more Source cves: CVE-2026-32711 Source advisory: SNYK:PYTHON-PYDICOM-15756938...

CVE-2026-32711

pydicom is a pure Python package for working with DICOM files. Versions 2.0.0-rc.1 through 3.0.1 are vulnerable to Path Traversal through a maliciously crafted DICOMDIR ReferencedFileID when it is set to a path outside the File-set root. pydicom resolves the path only to confirm that it exists, b...