{"id":"CVE-2026-44019","aliases":["GHSA-j5xp-7m2f-49jv","PYSEC-2026-2456"],"title":"Docling Core: Insufficient validation of image reference URIs","summary":"Docling Core: Insufficient validation of image reference URIs","severity":"high","cvss":8.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","vendor":"docling-core","product":"docling-core","ecosystem":"pip","affected":["docling-core >= 2.5.0, < 2.74.1"],"patched":["docling-core 2.74.1"],"published":"2026-06-03","updated":"2026-07-13","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-j5xp-7m2f-49jv","references":[{"url":"https://github.com/docling-project/docling-core/security/advisories/GHSA-j5xp-7m2f-49jv"},{"url":"https://github.com/docling-project/docling-core"},{"url":"https://github.com/docling-project/docling-core/releases/tag/v2.74.1"}],"tags":["osv","pip"],"ingestedAt":"2026-07-13T18:57:59.615Z","epss":0.00419,"epssPercentile":0.35844,"slug":"CVE-2026-44019","body":"## Overview\n\n### Impact\nIn versions `>= 2.5.0, < 2.74.1`, `docling-core`  could allow local `file://` image references and accepted inline `data:` content without a decoded-size limit.\n\nIn applications that accept untrusted image references, this may allow access to local files readable by the process or excessive memory use from large inline payloads.\n\n### Patches\nPatched in `docling-core` `2.74.1`.\nThe fix blocks local file URIs by default and adds a size limit for decoded inline image data.\n\nUsers should upgrade to:\n- `docling-core` `>= 2.74.1`\n\n### Workarounds\nIf upgrading is not immediately possible:\n- reject `file:` and `data:` image references from untrusted input\n- allow only approved local or remote image sources\n- apply input size and memory limits to processing workers\n\n### References\n- Fix release: [`v2.74.1`](https://github.com/docling-project/docling-core/releases/tag/v2.74.1)\n\n## Affected packages\n\n- `docling-core >= 2.5.0, < 2.74.1`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `docling-core 2.74.1`","depth":"twilight","depthScore":45,"depthScoreParts":{"impact":44.6,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}