CVE-2026-24009
2 advisories.
PyPI/docling-core CVE-2026-24009: high 8.1, EPSS 1.53%
docling-core vulnerable to Remote Code Execution via unsafe PyYAML usage
Action: Upgrade docling-core to 2.48.4 or later.
pip install docling-core==2.48.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.21.0 | 2.48.4 | - |
Fixed versions
| 2.48.4 |
Sources
- osv: GHSA-vqxf-v2gg-x3hc
- https://github.com/docling-project/docling-core/security/advisories/GHSA-vqxf-v2gg-x3hc
- https://nvd.nist.gov/vuln/detail/CVE-2026-24009
- https://github.com/docling-project/docling-core/issues/482
- https://github.com/docling-project/docling-core/commit/3e8d628eeeae50f0f8f239c8c7fea773d065d80c
- https://github.com/advisories/GHSA-8q59-q68h-6hv4
- https://github.com/docling-project/docling-core
- https://github.com/docling-project/docling-core/releases/tag/v2.48.4
CVE-2026-24009 · published · modified · JSON
PyPI/docling-core CVE-2026-24009: high 8.1, EPSS 1.53%
docling-core vulnerable to Remote Code Execution via unsafe PyYAML usage
Action: Upgrade docling-core to 2.48.4 or later.
pip install docling-core==2.48.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.21.0 | 2.48.4 | - |
Fixed versions
| 2.48.4 |
Sources
- osv: PYSEC-2026-1313
- https://github.com/docling-project/docling-core/security/advisories/GHSA-vqxf-v2gg-x3hc
- https://nvd.nist.gov/vuln/detail/CVE-2026-24009
- https://github.com/docling-project/docling-core/issues/482
- https://github.com/docling-project/docling-core/commit/3e8d628eeeae50f0f8f239c8c7fea773d065d80c
- https://github.com/advisories/GHSA-8q59-q68h-6hv4
- https://github.com/docling-project/docling-core
- https://github.com/docling-project/docling-core/releases/tag/v2.48.4
- https://pypi.org/project/docling-core
- https://github.com/advisories/GHSA-vqxf-v2gg-x3hc
CVE-2026-24009 · published · modified · JSON