Search
Find a vulnerability
Search criteria
4 vulnerabilities found for docling-core by docling
CVE-2026-44023 (GCVE-0-2026-44023)
Vulnerability from nvd – Published: 2026-07-16 21:00 – Updated: 2026-07-17 18:06
VLAI
EPSS
VEX
Title
Docling Core has unsafe remote filename resolution
Summary
Docling Core defines core data types and transformations for the document processing application Docling. In versions 1.5.0 and above, prior to 2.74.1, docling-core did not sufficiently restrict remote request destinations and could resolve a server-provided Content-Disposition to a local path in an unsafe manner. In applications that accept untrusted URLs, this could allow SSRF attacks targeting local files outside the user-defined cache directory. This issue has been fixed in version 2.74.1.
Severity
8.6 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-07-17 16:48 UTC
CWE
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://github.com/docling-project/docling-core/s… | x_refsource_CONFIRM |
| https://github.com/docling-project/docling-core/r… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| docling-project | docling-core |
Affected:
>= 1.5.0, < 2.74.1
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-44023",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-17T16:48:04.141576Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-07-17T18:06:33.532Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "docling-core",
"vendor": "docling-project",
"versions": [
{
"status": "affected",
"version": "\u003e= 1.5.0, \u003c 2.74.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Docling Core defines core data types and transformations for the document processing application Docling. In versions 1.5.0 and above, prior to 2.74.1, docling-core did not sufficiently restrict remote request destinations and could resolve a server-provided Content-Disposition to a local path in an unsafe manner. In applications that accept untrusted URLs, this could allow SSRF attacks targeting local files outside the user-defined cache directory. This issue has been fixed in version 2.74.1."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-918",
"description": "CWE-918: Server-Side Request Forgery (SSRF)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-16T21:00:49.617Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/docling-project/docling-core/security/advisories/GHSA-jmmv-h3mp-59v8",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/docling-project/docling-core/security/advisories/GHSA-jmmv-h3mp-59v8"
},
{
"name": "https://github.com/docling-project/docling-core/releases/tag/v2.74.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/docling-project/docling-core/releases/tag/v2.74.1"
}
],
"source": {
"advisory": "GHSA-jmmv-h3mp-59v8",
"discovery": "UNKNOWN"
},
"title": "Docling Core has unsafe remote filename resolution"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-44023",
"datePublished": "2026-07-16T21:00:49.617Z",
"dateReserved": "2026-05-04T21:24:36.506Z",
"dateUpdated": "2026-07-17T18:06:33.532Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-24009 (GCVE-0-2026-24009)
Vulnerability from nvd – Published: 2026-01-22 15:04 – Updated: 2026-01-22 15:59
VLAI
EPSS
VEX
Title
Docling Core vulnerable to Remote Code Execution via unsafe PyYAML usage
Summary
Docling Core (or docling-core) is a library that defines core data types and transformations in the document processing application Docling. A PyYAML-related Remote Code Execution (RCE) vulnerability, namely CVE-2020-14343, is exposed in docling-core starting in version 2.21.0 and prior to version 2.48.4, specifically only if the application uses pyyaml prior to version 5.4 and invokes `docling_core.types.doc.DoclingDocument.load_from_yaml()` passing it untrusted YAML data. The vulnerability has been patched in docling-core version 2.48.4. The fix mitigates the issue by switching `PyYAML` deserialization from `yaml.FullLoader` to `yaml.SafeLoader`, ensuring that untrusted data cannot trigger code execution. Users who cannot immediately upgrade docling-core can alternatively ensure that the installed version of PyYAML is 5.4 or greater.
Severity
8.1 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-01-22 15:59 UTC
CWE
- CWE-502 - Deserialization of Untrusted Data
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://github.com/docling-project/docling-core/s… | x_refsource_CONFIRM |
| https://github.com/docling-project/docling-core/i… | x_refsource_MISC |
| https://github.com/docling-project/docling-core/c… | x_refsource_MISC |
| https://github.com/advisories/GHSA-8q59-q68h-6hv4 | x_refsource_MISC |
| https://github.com/docling-project/docling-core/r… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| docling-project | docling-core |
Affected:
>= 2.21.0, < 2.48.4
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-24009",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-01-22T15:59:15.304157Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-01-22T15:59:19.883Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "docling-core",
"vendor": "docling-project",
"versions": [
{
"status": "affected",
"version": "\u003e= 2.21.0, \u003c 2.48.4"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Docling Core (or docling-core) is a library that defines core data types and transformations in the document processing application Docling. A PyYAML-related Remote Code Execution (RCE) vulnerability, namely CVE-2020-14343, is exposed in docling-core starting in version 2.21.0 and prior to version 2.48.4, specifically only if the application uses pyyaml prior to version 5.4 and invokes `docling_core.types.doc.DoclingDocument.load_from_yaml()` passing it untrusted YAML data. The vulnerability has been patched in docling-core version 2.48.4. The fix mitigates the issue by switching `PyYAML` deserialization from `yaml.FullLoader` to `yaml.SafeLoader`, ensuring that untrusted data cannot trigger code execution. Users who cannot immediately upgrade docling-core can alternatively ensure that the installed version of PyYAML is 5.4 or greater."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-502",
"description": "CWE-502: Deserialization of Untrusted Data",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-01-22T15:04:52.745Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/docling-project/docling-core/security/advisories/GHSA-vqxf-v2gg-x3hc",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/docling-project/docling-core/security/advisories/GHSA-vqxf-v2gg-x3hc"
},
{
"name": "https://github.com/docling-project/docling-core/issues/482",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/docling-project/docling-core/issues/482"
},
{
"name": "https://github.com/docling-project/docling-core/commit/3e8d628eeeae50f0f8f239c8c7fea773d065d80c",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/docling-project/docling-core/commit/3e8d628eeeae50f0f8f239c8c7fea773d065d80c"
},
{
"name": "https://github.com/advisories/GHSA-8q59-q68h-6hv4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/advisories/GHSA-8q59-q68h-6hv4"
},
{
"name": "https://github.com/docling-project/docling-core/releases/tag/v2.48.4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/docling-project/docling-core/releases/tag/v2.48.4"
}
],
"source": {
"advisory": "GHSA-vqxf-v2gg-x3hc",
"discovery": "UNKNOWN"
},
"title": "Docling Core vulnerable to Remote Code Execution via unsafe PyYAML usage"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-24009",
"datePublished": "2026-01-22T15:04:52.745Z",
"dateReserved": "2026-01-19T18:49:20.660Z",
"dateUpdated": "2026-01-22T15:59:19.883Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-44023 (GCVE-0-2026-44023)
Vulnerability from cvelistv5 – Published: 2026-07-16 21:00 – Updated: 2026-07-17 18:06
VLAI
EPSS
VEX
Title
Docling Core has unsafe remote filename resolution
Summary
Docling Core defines core data types and transformations for the document processing application Docling. In versions 1.5.0 and above, prior to 2.74.1, docling-core did not sufficiently restrict remote request destinations and could resolve a server-provided Content-Disposition to a local path in an unsafe manner. In applications that accept untrusted URLs, this could allow SSRF attacks targeting local files outside the user-defined cache directory. This issue has been fixed in version 2.74.1.
Severity
8.6 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-07-17 16:48 UTC
CWE
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://github.com/docling-project/docling-core/s… | x_refsource_CONFIRM |
| https://github.com/docling-project/docling-core/r… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| docling-project | docling-core |
Affected:
>= 1.5.0, < 2.74.1
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-44023",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-17T16:48:04.141576Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-07-17T18:06:33.532Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "docling-core",
"vendor": "docling-project",
"versions": [
{
"status": "affected",
"version": "\u003e= 1.5.0, \u003c 2.74.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Docling Core defines core data types and transformations for the document processing application Docling. In versions 1.5.0 and above, prior to 2.74.1, docling-core did not sufficiently restrict remote request destinations and could resolve a server-provided Content-Disposition to a local path in an unsafe manner. In applications that accept untrusted URLs, this could allow SSRF attacks targeting local files outside the user-defined cache directory. This issue has been fixed in version 2.74.1."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-918",
"description": "CWE-918: Server-Side Request Forgery (SSRF)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-16T21:00:49.617Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/docling-project/docling-core/security/advisories/GHSA-jmmv-h3mp-59v8",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/docling-project/docling-core/security/advisories/GHSA-jmmv-h3mp-59v8"
},
{
"name": "https://github.com/docling-project/docling-core/releases/tag/v2.74.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/docling-project/docling-core/releases/tag/v2.74.1"
}
],
"source": {
"advisory": "GHSA-jmmv-h3mp-59v8",
"discovery": "UNKNOWN"
},
"title": "Docling Core has unsafe remote filename resolution"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-44023",
"datePublished": "2026-07-16T21:00:49.617Z",
"dateReserved": "2026-05-04T21:24:36.506Z",
"dateUpdated": "2026-07-17T18:06:33.532Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-24009 (GCVE-0-2026-24009)
Vulnerability from cvelistv5 – Published: 2026-01-22 15:04 – Updated: 2026-01-22 15:59
VLAI
EPSS
VEX
Title
Docling Core vulnerable to Remote Code Execution via unsafe PyYAML usage
Summary
Docling Core (or docling-core) is a library that defines core data types and transformations in the document processing application Docling. A PyYAML-related Remote Code Execution (RCE) vulnerability, namely CVE-2020-14343, is exposed in docling-core starting in version 2.21.0 and prior to version 2.48.4, specifically only if the application uses pyyaml prior to version 5.4 and invokes `docling_core.types.doc.DoclingDocument.load_from_yaml()` passing it untrusted YAML data. The vulnerability has been patched in docling-core version 2.48.4. The fix mitigates the issue by switching `PyYAML` deserialization from `yaml.FullLoader` to `yaml.SafeLoader`, ensuring that untrusted data cannot trigger code execution. Users who cannot immediately upgrade docling-core can alternatively ensure that the installed version of PyYAML is 5.4 or greater.
Severity
8.1 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-01-22 15:59 UTC
CWE
- CWE-502 - Deserialization of Untrusted Data
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://github.com/docling-project/docling-core/s… | x_refsource_CONFIRM |
| https://github.com/docling-project/docling-core/i… | x_refsource_MISC |
| https://github.com/docling-project/docling-core/c… | x_refsource_MISC |
| https://github.com/advisories/GHSA-8q59-q68h-6hv4 | x_refsource_MISC |
| https://github.com/docling-project/docling-core/r… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| docling-project | docling-core |
Affected:
>= 2.21.0, < 2.48.4
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-24009",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-01-22T15:59:15.304157Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-01-22T15:59:19.883Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "docling-core",
"vendor": "docling-project",
"versions": [
{
"status": "affected",
"version": "\u003e= 2.21.0, \u003c 2.48.4"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Docling Core (or docling-core) is a library that defines core data types and transformations in the document processing application Docling. A PyYAML-related Remote Code Execution (RCE) vulnerability, namely CVE-2020-14343, is exposed in docling-core starting in version 2.21.0 and prior to version 2.48.4, specifically only if the application uses pyyaml prior to version 5.4 and invokes `docling_core.types.doc.DoclingDocument.load_from_yaml()` passing it untrusted YAML data. The vulnerability has been patched in docling-core version 2.48.4. The fix mitigates the issue by switching `PyYAML` deserialization from `yaml.FullLoader` to `yaml.SafeLoader`, ensuring that untrusted data cannot trigger code execution. Users who cannot immediately upgrade docling-core can alternatively ensure that the installed version of PyYAML is 5.4 or greater."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-502",
"description": "CWE-502: Deserialization of Untrusted Data",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-01-22T15:04:52.745Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/docling-project/docling-core/security/advisories/GHSA-vqxf-v2gg-x3hc",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/docling-project/docling-core/security/advisories/GHSA-vqxf-v2gg-x3hc"
},
{
"name": "https://github.com/docling-project/docling-core/issues/482",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/docling-project/docling-core/issues/482"
},
{
"name": "https://github.com/docling-project/docling-core/commit/3e8d628eeeae50f0f8f239c8c7fea773d065d80c",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/docling-project/docling-core/commit/3e8d628eeeae50f0f8f239c8c7fea773d065d80c"
},
{
"name": "https://github.com/advisories/GHSA-8q59-q68h-6hv4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/advisories/GHSA-8q59-q68h-6hv4"
},
{
"name": "https://github.com/docling-project/docling-core/releases/tag/v2.48.4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/docling-project/docling-core/releases/tag/v2.48.4"
}
],
"source": {
"advisory": "GHSA-vqxf-v2gg-x3hc",
"discovery": "UNKNOWN"
},
"title": "Docling Core vulnerable to Remote Code Execution via unsafe PyYAML usage"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-24009",
"datePublished": "2026-01-22T15:04:52.745Z",
"dateReserved": "2026-01-19T18:49:20.660Z",
"dateUpdated": "2026-01-22T15:59:19.883Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}