pydicom
Warn
Audited by Snyk on Jun 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). The required runtime workflow reads OUTSIDER-authored DICOM files from a user-supplied path via
pydicom.dcmread(...)(e.g., inscripts/anonymize_dicom.py,scripts/dicom_to_image.py, andscripts/extract_metadata.py), and DICOM metadata fields are free-text strings that can contain attacker-controlled content which is then converted to readable text (printed/written) and thus fed into the agent/LLM context.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata