docling-project docling-core

• CVE-2026-112310 Medium 4.3 docling-core 2.5.0 before 2.103.0 Local File Disclosure via Plain Path ImageRef 0.3%
• CVE-2026-44023 High 8.6 Docling Core has unsafe remote filename resolution 0.4%
• CVE-2026-44019 High 8.1 Docling Core has insufficient validation of image reference URIs 0.4%
• CVE-2026-24009 High 8.1 Docling Core vulnerable to Remote Code Execution via unsafe PyYAML usage 1.5%