Docling Core code issues and vulnerabilities

Docling Core is an open-source Python library developed by the Docling Project. Versions of Docling Core from 2.21.0 to 2.48.4 had code vulnerabilities, which were caused by PyYAML deserialization issues. These vulnerabilities could lead to remote code execution...

CVE-2026-24009: Deserialization of Untrusted Data

Docling Core or docling-core is a library that defines core data types and transformations in the document processing application Docling. A PyYAML-related Remote Code Execution RCE vulnerability, namely CVE-2020-14343, is exposed in docling-core starting in version 2.21.0 and prior to version...

PT-2026-3946

Name of the Vulnerable Software and Affected Versions Docling Core versions 2.21.0 through 2.48.3 Description Docling Core, a library for document processing, contains a Remote Code Execution RCE issue related to PyYAML. This issue, identified as CVE-2020-14343, arises when the application uses...