Skip to content
OpenAdvisories

Package · PyPI

docling-core

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 8.6
    CVE-2026-44023

    Docling Core has unsafe remote filename resolution

    Docling Core defines core data types and transformations for the document processing application Docling. In versions 1.5.0 and above, prior to 2.74.1, docling-core did not sufficiently restrict remote request destinations and could resolve a server-provided …

    docling-project docling-core docling-core PyPI
  • High 8.1
    CVE-2026-44019

    Docling Core has insufficient validation of image reference URIs

    Docling Core defines core data types and transformations for the document processing application Docling. In versions 2.5.0 and above, prior to 2.74.1, docling-core could allow local file:// image references and accepted inline data: content without a decoded…

    docling-project docling-core docling-core PyPI
  • High 8.1
    CVE-2026-24009 Public exploit

    Docling Core vulnerable to Remote Code Execution via unsafe PyYAML usage

    Docling Core (or docling-core) is a library that defines core data types and transformations in the document processing application Docling. A PyYAML-related Remote Code Execution (RCE) vulnerability, namely CVE-2020-14343, is exposed in docling-core starting…

    docling-project docling-core docling-core PyPI