pydicom

Use pydicom for DICOM dataset I/O and pixel processing. Version 3.0.2 is the current stable release reviewed here. It fixes CVE-2026-32711, a crafted DICOMDIR path-traversal issue. pydicom 3.0.2 declares Python >=3.10; its bundled DICOM dictionary is 2024c, while the live DICOM Standard may be newer.

Mandatory safety boundary

• Work only with local data that the user is authorized to access.
• DICOM metadata, file names, private elements, overlays, structured content, and pixels may contain protected health information (PHI).
• Never print Dataset, export full metadata/JSON, or log element values by default. Use a documented allowlist and aggregate output.
• pydicom is a general DICOM framework, not a diagnostic viewer. Pixel output, validation, conversion, and plugin availability are not diagnostic claims.
• De-identification is profile-, purpose-, recipient-, jurisdiction-, and threat-context-specific. It requires privacy/DICOM expert verification.
• Never claim that a tag-removal script is DICOM PS3.15, HIPAA, GDPR, or other compliance. Preserve originals and audit derived outputs.
• Treat deterministic pseudonymization keys and UID maps as re-ident…