---
id: CVE-2026-44019
aliases:
  - GHSA-j5xp-7m2f-49jv
  - PYSEC-2026-2456
title: 'Docling Core: Insufficient validation of image reference URIs'
summary: 'Docling Core: Insufficient validation of image reference URIs'
severity: high
cvss: 8.1
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'
vendor: docling-core
product: docling-core
ecosystem: pip
affected:
  - 'docling-core >= 2.5.0, < 2.74.1'
patched:
  - docling-core 2.74.1
published: '2026-06-03'
updated: '2026-07-13'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-j5xp-7m2f-49jv'
references:
  - url: >-
      https://github.com/docling-project/docling-core/security/advisories/GHSA-j5xp-7m2f-49jv
  - url: 'https://github.com/docling-project/docling-core'
  - url: 'https://github.com/docling-project/docling-core/releases/tag/v2.74.1'
tags:
  - osv
  - pip
ingestedAt: '2026-07-13T18:57:59.615Z'
epss: 0.00419
epssPercentile: 0.33538
---

## Overview

### Impact
In versions `>= 2.5.0, < 2.74.1`, `docling-core`  could allow local `file://` image references and accepted inline `data:` content without a decoded-size limit.

In applications that accept untrusted image references, this may allow access to local files readable by the process or excessive memory use from large inline payloads.

### Patches
Patched in `docling-core` `2.74.1`.
The fix blocks local file URIs by default and adds a size limit for decoded inline image data.

Users should upgrade to:
- `docling-core` `>= 2.74.1`

### Workarounds
If upgrading is not immediately possible:
- reject `file:` and `data:` image references from untrusted input
- allow only approved local or remote image sources
- apply input size and memory limits to processing workers

### References
- Fix release: [`v2.74.1`](https://github.com/docling-project/docling-core/releases/tag/v2.74.1)

## Affected packages

- `docling-core >= 2.5.0, < 2.74.1`

## Remediation

Upgrade to a patched release:

- `docling-core 2.74.1`