PyPI/docling-core CVE-2026-44023: high 8.6, EPSS 0.43%

Docling Core: Unsafe remote filename resolution

Action: Upgrade docling-core to 2.74.1 or later.

pip install docling-core==2.74.1

Affected

Fixed versions

Sources

• osv: PYSEC-2026-2457
• https://github.com/docling-project/docling-core/security/advisories/GHSA-jmmv-h3mp-59v8
• https://github.com/docling-project/docling-core
• https://github.com/docling-project/docling-core/releases/tag/v2.74.1
• https://pypi.org/project/docling-core
• https://github.com/advisories/GHSA-jmmv-h3mp-59v8
• https://nvd.nist.gov/vuln/detail/CVE-2026-44023

CVE-2026-44023 · published 2026-07-13T15:46:14.570481Z · modified 2026-07-13T16:31:40.059243896Z · JSON