https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:52:10.737210+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-44023 CVE-2026-44023 — Docling Core has unsafe remote filename resolution 2026-10-03T01:52:10.758173+00:00

Affected: docling-project docling-core

Docling Core defines core data types and transformations for the document processing application Docling. In versions 1.5.0 and above, prior to 2.74.1, docling-core did not sufficiently restrict remote request destinations and could resolve a server-provided Content-Disposition to a local path in an unsafe manner. In applications that accept untrusted URLs, this could allow SSRF attacks targeting local files outside the user-defined cache directory. This issue has been fixed in version 2.74.1.

 https://cve.radiocsirt.org/vuln/ghsa-jmmv-h3mp-59v8 GHSA-jmmv-h3mp-59v8 — Docling Core: Unsafe remote filename resolution 2026-10-03T01:52:10.758236+00:00

Affected: PyPI: docling-core

### Impact In versions `>= 1.5.0, < 2.74.1`, `docling-core` did not sufficiently restrict remote request destinations and could resolve a server-provided `Content-Disposition` to a local path in an unsafe manner.

In applications that accept untrusted URLs, this could allow SSRF attacks targeting local files outside the user-defined cache directory.

### Patches Patched in `docling-core` `2.74.1`. The fix adds stricter validation for remote destinations and normalizes server-provided filenames before use.

Users should upgrade to: - `docling-core` `>= 2.74.1`

### Workarounds If upgrading is not immediately possible, avoid passing untrusted URLs into remote fetch functionality.

### References - Fix release: [`v2.74.1`](https://github.com/docling-project/docling-core/releases/tag/v2.74.1)