Grassroot DICOM — Vulnerabilities & Security Advisories 7

Grassroot DICOM is an open-source medical imaging platform designed for handling DICOM files in healthcare environments. Historically, it has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, as evidenced by its seven recorded CVEs. The platform's security posture has been compromised through improper input validation and insufficient access controls, leading to potential unauthorized access or system compromise. While no major public incidents have been widely documented, its consistent vulnerability pattern suggests ongoing security challenges in handling sensitive medical data securely.