What’s Vulnerable › Products

docling-project docling-core vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your docling-project docling-core version is affected

Latest docling-project docling-core vulnerabilities

• CVE-2026-112310 — docling-core 2.5.0 before 2.103.0 Local File Disclosure via Plain Path ImageRef (CVSS 4.3)
• CVE-2026-44023 — Docling Core has unsafe remote filename resolution (CVSS 8.6)
• CVE-2026-44019 — Docling Core has insufficient validation of image reference URIs (CVSS 8.1)
• CVE-2026-24009 — Docling Core vulnerable to Remote Code Execution via unsafe PyYAML usage (CVSS 9.8)