- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 3 · 3 high
- Weekly downloads
- 1.5M
- Dependents
- 14
- Registry
- PyPI
Advisories 3
- CVE-2026-44023High 8.6
Docling Core has unsafe remote filename resolution
Affected: from 1.5.0, fixed in 2.74.1.
- CVE-2026-44019High 8.1
Docling Core has insufficient validation of image reference URIs
Affected: from 2.5.0, fixed in 2.74.1.
- CVE-2026-24009High 8.1
Docling Core vulnerable to Remote Code Execution via unsafe PyYAML usage
Affected: from 2.21.0, fixed in 2.48.4.