Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Docling Core defines core data types and transformations for the document processing application Docling. In versions 1.5.0 and above, prior to 2.74.1, docling-core did not sufficiently restrict remote request destinations and could resolve a server-provided Content-Disposition to a local path in an unsafe manner. In applications that accept untrusted URLs, this could allow SSRF attacks targeting local files outside the user-defined cache directory. This issue has been fixed in version 2.74.1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-04 | 1 | General1 |
| 2026-07-17 | 1 | Disclosure1 |
CVE-2026-44023 Server-Side Request Forgery in Docling Core Versions 1.5.0 Through 2.74.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-44023
Post summary
The post announces a Server‑Side Request Forgery vulnerability (CVE‑2026‑44023) in Docling Core versions 1.5.0‑2.74.0.
🔴 Docling Core, Path Traversal leading to SSRF, #CVE-2026-44023 (High) -DC-Jun2026-206 https://dailycve.com/docling-core-path-traversal-leading-to-ssrf-cve-2026-44023-high-dc-jun2026-206/
Post summary
The post announces a new CVE‑2026‑44023 involving path traversal that leads to SSRF, linking to a DailyCVE article but providing no PoC, exploit code, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | docling | docling-core | - | python | - |