docling-core vulnerabilities
CVEs whose affected-version data names the docling-core package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
CVE-2026-112310Medium· 4.3docling-core 2.5.0 before 2.103.0 Local File Disclosure via Plain Path ImageRef
docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allow_image_file_uri gate. Attackers can subm…
▾ Sunlitdocling-project · docling-coreEPSS 0.34%via CVEORG
CVE-2026-44023High· 8.6Docling Core: Unsafe remote filename resolution
Docling Core: Unsafe remote filename resolution
▾ Twilightdocling-core · docling-coreEPSS 0.43%via OSV
CVE-2026-44019High· 8.1Docling Core: Insufficient validation of image reference URIs
Docling Core: Insufficient validation of image reference URIs
▾ Twilightdocling-core · docling-coreEPSS 0.42%via OSV
CVE-2026-24009High· 8.1PoCdocling-core vulnerable to Remote Code Execution via unsafe PyYAML usage
docling-core vulnerable to Remote Code Execution via unsafe PyYAML usage
▾ Midnightdocling-core · docling-coreEPSS 1.5%via OSV