DO
Product
docling-core
4
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 2Medium 1Low 0
Watch
Add docling-core to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-24009 | 9.8 | Jan 22 | Docling Core vulnerable to Remote Code Execution via unsafe PyYAML usage Affected: >= 2.21.0, < 2.48.4 |
| CVE-2026-44023 | 8.6 | Jul 16 | Docling Core has unsafe remote filename resolution Affected: >= 1.5.0, < 2.74.1 |
| CVE-2026-44019 | 8.1 | Jul 16 | Docling Core has insufficient validation of image reference URIs Affected: >= 2.5.0, < 2.74.1 |
| CVE-2026-112310 | 4.3 | Oct 19 | docling-core 2.5.0 before 2.103.0 Local File Disclosure via Plain Path ImageRef Affected: 2.5.0 before 2.103.0 |
Showing 4