11 matches found
docling-core vulnerable to Remote Code Execution via unsafe PyYAML usage
ImpactA PyYAML-related Remote Code Execution RCE vulnerability, namely CVE-2020-14343, is exposed in docling-core =2.21.0, 2.48.4 and, specifically only if the application uses pyyaml 5.4 and invokes doclingcore.types.doc.DoclingDocument.loadfromyaml passing it untrusted YAML data. PatchesThe...
10CVSS6.2AI score0.05984EPSS
SaveExploits2References9Affected Software1
20