Vulnerabilities for docling-core

First version without a known vulnerability: 0.2.0

Details

• GHSA-jmmv-h3mp-59v82026-06-03

  Docling Core: Unsafe remote filename resolution

  Fixed in: 2.74.1

• GHSA-j5xp-7m2f-49jv2026-06-03

  Docling Core: Insufficient validation of image reference URIs

  Fixed in: 2.74.1

• GHSA-vqxf-v2gg-x3hc2026-01-22

  docling-core vulnerable to Remote Code Execution via unsafe PyYAML usage

  Fixed in: 2.48.4