Skip to content
OpenAdvisories

Product · docling-project

docling-core

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-112310

    docling-core 2.5.0 before 2.103.0 Local File Disclosure via Plain Path ImageRef

    docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allow_image_file_uri gate. Attackers can submit crafted DoclingDocu…

    docling-project docling-core