Vulnerability-Lookup

CVE-2026-24009 (GCVE-0-2026-24009)

Vulnerability from cvelistv5 – Published: 2026-01-22 15:04 – Updated: 2026-01-22 15:59

Title

Docling Core vulnerable to Remote Code Execution via unsafe PyYAML usage

Summary

Docling Core (or docling-core) is a library that defines core data types and transformations in the document processing application Docling. A PyYAML-related Remote Code Execution (RCE) vulnerability, namely CVE-2020-14343, is exposed in docling-core starting in version 2.21.0 and prior to version 2.48.4, specifically only if the application uses pyyaml prior to version 5.4 and invokes `docling_core.types.doc.DoclingDocument.load_from_yaml()` passing it untrusted YAML data. The vulnerability has been patched in docling-core version 2.48.4. The fix mitigates the issue by switching `PyYAML` deserialization from `yaml.FullLoader` to `yaml.SafeLoader`, ensuring that untrusted data cannot trigger code execution. Users who cannot immediately upgrade docling-core can alternatively ensure that the installed version of PyYAML is 5.4 or greater.

Severity

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-01-22 15:59 UTC

CWE

CWE-502 - Deserialization of Untrusted Data

Assigner

GitHub_M mitre root

References

5 references

URL	Tags
https://github.com/docling-project/docling-core/s…	x_refsource_CONFIRM
https://github.com/docling-project/docling-core/i…	x_refsource_MISC
https://github.com/docling-project/docling-core/c…	x_refsource_MISC
https://github.com/advisories/GHSA-8q59-q68h-6hv4	x_refsource_MISC
https://github.com/docling-project/docling-core/r…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version	CPE status
docling-project	docling-core	Affected: >= 2.21.0, < 2.48.4	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-24009",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-22T15:59:15.304157Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-22T15:59:19.883Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "docling-core",
          "vendor": "docling-project",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 2.21.0, \u003c 2.48.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Docling Core (or docling-core) is a library that defines core data types and transformations in the document processing application Docling. A PyYAML-related Remote Code Execution (RCE) vulnerability, namely CVE-2020-14343, is exposed in docling-core starting in version 2.21.0 and prior to version 2.48.4, specifically only if the application uses pyyaml prior to version 5.4 and invokes `docling_core.types.doc.DoclingDocument.load_from_yaml()` passing it untrusted YAML data. The vulnerability has been patched in docling-core version 2.48.4. The fix mitigates the issue by switching `PyYAML` deserialization from `yaml.FullLoader` to `yaml.SafeLoader`, ensuring that untrusted data cannot trigger code execution. Users who cannot immediately upgrade docling-core can alternatively ensure that the installed version of PyYAML is 5.4 or greater."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-502",
              "description": "CWE-502: Deserialization of Untrusted Data",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-01-22T15:04:52.745Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/docling-project/docling-core/security/advisories/GHSA-vqxf-v2gg-x3hc",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/docling-project/docling-core/security/advisories/GHSA-vqxf-v2gg-x3hc"
        },
        {
          "name": "https://github.com/docling-project/docling-core/issues/482",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/docling-project/docling-core/issues/482"
        },
        {
          "name": "https://github.com/docling-project/docling-core/commit/3e8d628eeeae50f0f8f239c8c7fea773d065d80c",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/docling-project/docling-core/commit/3e8d628eeeae50f0f8f239c8c7fea773d065d80c"
        },
        {
          "name": "https://github.com/advisories/GHSA-8q59-q68h-6hv4",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/advisories/GHSA-8q59-q68h-6hv4"
        },
        {
          "name": "https://github.com/docling-project/docling-core/releases/tag/v2.48.4",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/docling-project/docling-core/releases/tag/v2.48.4"
        }
      ],
      "source": {
        "advisory": "GHSA-vqxf-v2gg-x3hc",
        "discovery": "UNKNOWN"
      },
      "title": "Docling Core vulnerable to Remote Code Execution via unsafe PyYAML usage"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-24009",
    "datePublished": "2026-01-22T15:04:52.745Z",
    "dateReserved": "2026-01-19T18:49:20.660Z",
    "dateUpdated": "2026-01-22T15:59:19.883Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-24009",
      "date": "2026-09-16",
      "epss": "0.01428",
      "percentile": "0.71646"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-24009\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2026-01-22T16:16:09.320\",\"lastModified\":\"2026-06-17T10:22:28.303\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Docling Core (or docling-core) is a library that defines core data types and transformations in the document processing application Docling. A PyYAML-related Remote Code Execution (RCE) vulnerability, namely CVE-2020-14343, is exposed in docling-core starting in version 2.21.0 and prior to version 2.48.4, specifically only if the application uses pyyaml prior to version 5.4 and invokes `docling_core.types.doc.DoclingDocument.load_from_yaml()` passing it untrusted YAML data. The vulnerability has been patched in docling-core version 2.48.4. The fix mitigates the issue by switching `PyYAML` deserialization from `yaml.FullLoader` to `yaml.SafeLoader`, ensuring that untrusted data cannot trigger code execution. Users who cannot immediately upgrade docling-core can alternatively ensure that the installed version of PyYAML is 5.4 or greater.\"},{\"lang\":\"es\",\"value\":\"Docling Core (o docling-core) es una librer\u00eda que define tipos de datos centrales y transformaciones en la aplicaci\u00f3n de procesamiento de documentos Docling. Una vulnerabilidad de ejecuci\u00f3n remota de c\u00f3digo (RCE) relacionada con PyYAML, concretamente CVE-2020-14343, se expone en docling-core a partir de la versi\u00f3n 2.21.0 y anterior a la versi\u00f3n 2.48.4, espec\u00edficamente solo si la aplicaci\u00f3n utiliza pyyaml anterior a la versi\u00f3n 5.4 e invoca \u0027docling_core.types.doc.DoclingDocument.load_from_yaml()\u0027 pas\u00e1ndole datos YAML no confiables. La vulnerabilidad ha sido parcheada en docling-core versi\u00f3n 2.48.4. La soluci\u00f3n mitiga el problema al cambiar la deserializaci\u00f3n de \u0027PyYAML\u0027 de \u0027yaml.FullLoader\u0027 a \u0027yaml.SafeLoader\u0027, asegurando que los datos no confiables no puedan desencadenar la ejecuci\u00f3n de c\u00f3digo. Los usuarios que no puedan actualizar docling-core inmediatamente pueden, alternativamente, asegurarse de que la versi\u00f3n instalada de PyYAML sea 5.4 o superior.\"}],\"affected\":[{\"source\":\"security-advisories@github.com\",\"affectedData\":[{\"vendor\":\"docling-project\",\"product\":\"docling-core\",\"versions\":[{\"version\":\"\u003e= 2.21.0, \u003c 2.48.4\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.2,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-01-22T15:59:15.304157Z\",\"id\":\"CVE-2026-24009\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-502\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:docling:docling-core:*:*:*:*:*:python:*:*\",\"versionStartIncluding\":\"2.21.0\",\"versionEndExcluding\":\"2.48.4\",\"matchCriteriaId\":\"FD7C4503-47A0-4AC3-BCF6-17C8E790F67F\"}]}]}],\"references\":[{\"url\":\"https://github.com/advisories/GHSA-8q59-q68h-6hv4\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Not Applicable\"]},{\"url\":\"https://github.com/docling-project/docling-core/commit/3e8d628eeeae50f0f8f239c8c7fea773d065d80c\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/docling-project/docling-core/issues/482\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/docling-project/docling-core/releases/tag/v2.48.4\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Product\",\"Release Notes\"]},{\"url\":\"https://github.com/docling-project/docling-core/security/advisories/GHSA-vqxf-v2gg-x3hc\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Mitigation\",\"Patch\",\"Vendor Advisory\"]}]}}",
    "redhat_vex": {
      "current_release_date": "2026-01-23T15:21:54+00:00",
      "cve": "CVE-2026-24009",
      "id": "CVE-2026-24009",
      "initial_release_date": "2026-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "Docling Core vulnerable to Remote Code Execution via unsafe PyYAML usage",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24009.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-24009\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-01-22T15:59:15.304157Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-01-22T15:59:17.336Z\"}}], \"cna\": {\"title\": \"Docling Core vulnerable to Remote Code Execution via unsafe PyYAML usage\", \"source\": {\"advisory\": \"GHSA-vqxf-v2gg-x3hc\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 8.1, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"vendor\": \"docling-project\", \"product\": \"docling-core\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003e= 2.21.0, \u003c 2.48.4\"}]}], \"references\": [{\"url\": \"https://github.com/docling-project/docling-core/security/advisories/GHSA-vqxf-v2gg-x3hc\", \"name\": \"https://github.com/docling-project/docling-core/security/advisories/GHSA-vqxf-v2gg-x3hc\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://github.com/docling-project/docling-core/issues/482\", \"name\": \"https://github.com/docling-project/docling-core/issues/482\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/docling-project/docling-core/commit/3e8d628eeeae50f0f8f239c8c7fea773d065d80c\", \"name\": \"https://github.com/docling-project/docling-core/commit/3e8d628eeeae50f0f8f239c8c7fea773d065d80c\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/advisories/GHSA-8q59-q68h-6hv4\", \"name\": \"https://github.com/advisories/GHSA-8q59-q68h-6hv4\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/docling-project/docling-core/releases/tag/v2.48.4\", \"name\": \"https://github.com/docling-project/docling-core/releases/tag/v2.48.4\", \"tags\": [\"x_refsource_MISC\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Docling Core (or docling-core) is a library that defines core data types and transformations in the document processing application Docling. A PyYAML-related Remote Code Execution (RCE) vulnerability, namely CVE-2020-14343, is exposed in docling-core starting in version 2.21.0 and prior to version 2.48.4, specifically only if the application uses pyyaml prior to version 5.4 and invokes `docling_core.types.doc.DoclingDocument.load_from_yaml()` passing it untrusted YAML data. The vulnerability has been patched in docling-core version 2.48.4. The fix mitigates the issue by switching `PyYAML` deserialization from `yaml.FullLoader` to `yaml.SafeLoader`, ensuring that untrusted data cannot trigger code execution. Users who cannot immediately upgrade docling-core can alternatively ensure that the installed version of PyYAML is 5.4 or greater.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-502\", \"description\": \"CWE-502: Deserialization of Untrusted Data\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2026-01-22T15:04:52.745Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-24009\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-01-22T15:59:19.883Z\", \"dateReserved\": \"2026-01-19T18:49:20.660Z\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2026-01-22T15:04:52.745Z\", \"assignerShortName\": \"GitHub_M\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2026-24009

Vulnerability from fkie_nvd - Published: 2026-01-22 16:16 - Updated: 2026-06-17 10:22

Severity

8.1 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

References

URL	Tags
security-advisories@github.com	https://github.com/advisories/GHSA-8q59-q68h-6hv4	Not Applicable
security-advisories@github.com	https://github.com/docling-project/docling-core/commit/3e8d628eeeae50f0f8f239c8c7fea773d065d80c	Patch
security-advisories@github.com	https://github.com/docling-project/docling-core/issues/482	Issue Tracking
security-advisories@github.com	https://github.com/docling-project/docling-core/releases/tag/v2.48.4	Product, Release Notes
security-advisories@github.com	https://github.com/docling-project/docling-core/security/advisories/GHSA-vqxf-v2gg-x3hc	Mitigation, Patch, Vendor Advisory

Impacted products

	Vendor	Product	Version
	docling	docling-core	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "docling-core",
          "vendor": "docling-project",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 2.21.0, \u003c 2.48.4"
            }
          ]
        }
      ],
      "source": "security-advisories@github.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:docling:docling-core:*:*:*:*:*:python:*:*",
              "matchCriteriaId": "FD7C4503-47A0-4AC3-BCF6-17C8E790F67F",
              "versionEndExcluding": "2.48.4",
              "versionStartIncluding": "2.21.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Docling Core (or docling-core) is a library that defines core data types and transformations in the document processing application Docling. A PyYAML-related Remote Code Execution (RCE) vulnerability, namely CVE-2020-14343, is exposed in docling-core starting in version 2.21.0 and prior to version 2.48.4, specifically only if the application uses pyyaml prior to version 5.4 and invokes `docling_core.types.doc.DoclingDocument.load_from_yaml()` passing it untrusted YAML data. The vulnerability has been patched in docling-core version 2.48.4. The fix mitigates the issue by switching `PyYAML` deserialization from `yaml.FullLoader` to `yaml.SafeLoader`, ensuring that untrusted data cannot trigger code execution. Users who cannot immediately upgrade docling-core can alternatively ensure that the installed version of PyYAML is 5.4 or greater."
    },
    {
      "lang": "es",
      "value": "Docling Core (o docling-core) es una librer\u00eda que define tipos de datos centrales y transformaciones en la aplicaci\u00f3n de procesamiento de documentos Docling. Una vulnerabilidad de ejecuci\u00f3n remota de c\u00f3digo (RCE) relacionada con PyYAML, concretamente CVE-2020-14343, se expone en docling-core a partir de la versi\u00f3n 2.21.0 y anterior a la versi\u00f3n 2.48.4, espec\u00edficamente solo si la aplicaci\u00f3n utiliza pyyaml anterior a la versi\u00f3n 5.4 e invoca \u0027docling_core.types.doc.DoclingDocument.load_from_yaml()\u0027 pas\u00e1ndole datos YAML no confiables. La vulnerabilidad ha sido parcheada en docling-core versi\u00f3n 2.48.4. La soluci\u00f3n mitiga el problema al cambiar la deserializaci\u00f3n de \u0027PyYAML\u0027 de \u0027yaml.FullLoader\u0027 a \u0027yaml.SafeLoader\u0027, asegurando que los datos no confiables no puedan desencadenar la ejecuci\u00f3n de c\u00f3digo. Los usuarios que no puedan actualizar docling-core inmediatamente pueden, alternativamente, asegurarse de que la versi\u00f3n instalada de PyYAML sea 5.4 o superior."
    }
  ],
  "id": "CVE-2026-24009",
  "lastModified": "2026-06-17T10:22:28.303",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 8.1,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.2,
        "impactScore": 5.9,
        "source": "security-advisories@github.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-24009",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-01-22T15:59:15.304157Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-01-22T16:16:09.320",
  "references": [
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Not Applicable"
      ],
      "url": "https://github.com/advisories/GHSA-8q59-q68h-6hv4"
    },
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Patch"
      ],
      "url": "https://github.com/docling-project/docling-core/commit/3e8d628eeeae50f0f8f239c8c7fea773d065d80c"
    },
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Issue Tracking"
      ],
      "url": "https://github.com/docling-project/docling-core/issues/482"
    },
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Product",
        "Release Notes"
      ],
      "url": "https://github.com/docling-project/docling-core/releases/tag/v2.48.4"
    },
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Mitigation",
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://github.com/docling-project/docling-core/security/advisories/GHSA-vqxf-v2gg-x3hc"
    }
  ],
  "sourceIdentifier": "security-advisories@github.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-502"
        }
      ],
      "source": "security-advisories@github.com",
      "type": "Secondary"
    }
  ]
}

GHSA-VQXF-V2GG-X3HC

Vulnerability from github – Published: 2026-01-22 18:02 – Updated: 2026-01-22 18:43

Summary

docling-core vulnerable to Remote Code Execution via unsafe PyYAML usage

Details

Impact

A PyYAML-related Remote Code Execution (RCE) vulnerability, namely CVE-2020-14343, is exposed in docling-core >=2.21.0, <2.48.4 and, specifically only if the application uses pyyaml < 5.4 and invokes docling_core.types.doc.DoclingDocument.load_from_yaml() passing it untrusted YAML data.

Patches

The vulnerability has been patched in docling-core version 2.48.4. The fix mitigates the issue by switching PyYAML deserialization from yaml.FullLoader to yaml.SafeLoader, ensuring that untrusted data cannot trigger code execution.

Workarounds

Users who cannot immediately upgrade docling-core can alternatively ensure that the installed version of PyYAML is 5.4 or greater, which supposedly patches CVE-2020-14343.

References

GitHub Issue: #482
Upstream Advisory: CVE-2020-14343
Fix Release: v2.48.4

Severity

8.1 (High)


                  
                    CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "docling-core"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "2.21.0"
            },
            {
              "fixed": "2.48.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2026-24009"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-502"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2026-01-22T18:02:45Z",
    "nvd_published_at": "2026-01-22T16:16:09Z",
    "severity": "HIGH"
  },
  "details": "### Impact\n\nA PyYAML-related Remote Code Execution (RCE) vulnerability, namely CVE-2020-14343, is exposed in `docling-core \u003e=2.21.0, \u003c2.48.4` and, specifically only if the application uses `pyyaml \u003c 5.4` and invokes `docling_core.types.doc.DoclingDocument.load_from_yaml()` passing it untrusted YAML data.\n\n### Patches\n\nThe vulnerability has been patched in `docling-core` version **2.48.4**.\nThe fix mitigates the issue by switching `PyYAML` deserialization from `yaml.FullLoader` to `yaml.SafeLoader`, ensuring that untrusted data cannot trigger code execution.\n\n### Workarounds\n\nUsers who cannot immediately upgrade `docling-core` can alternatively ensure that the installed version of `PyYAML` is **5.4 or greater**, which supposedly patches CVE-2020-14343.\n\n### References\n\n* GitHub Issue: #482\n* Upstream Advisory: CVE-2020-14343\n* Fix Release: [v2.48.4](https://github.com/docling-project/docling-core/releases/tag/v2.48.4)",
  "id": "GHSA-vqxf-v2gg-x3hc",
  "modified": "2026-01-22T18:43:42Z",
  "published": "2026-01-22T18:02:45Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/docling-project/docling-core/security/advisories/GHSA-vqxf-v2gg-x3hc"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24009"
    },
    {
      "type": "WEB",
      "url": "https://github.com/docling-project/docling-core/issues/482"
    },
    {
      "type": "WEB",
      "url": "https://github.com/docling-project/docling-core/commit/3e8d628eeeae50f0f8f239c8c7fea773d065d80c"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/advisories/GHSA-8q59-q68h-6hv4"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/docling-project/docling-core"
    },
    {
      "type": "WEB",
      "url": "https://github.com/docling-project/docling-core/releases/tag/v2.48.4"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "docling-core vulnerable to Remote Code Execution via unsafe PyYAML usage"
}

PYSEC-2026-1313

Vulnerability from pysec - Published: 2026-07-07 16:03 - Updated: 2026-07-07 17:24

Details

Impact

Patches

Workarounds

Users who cannot immediately upgrade docling-core can alternatively ensure that the installed version of PyYAML is 5.4 or greater, which supposedly patches CVE-2020-14343.

References

GitHub Issue: #482
Upstream Advisory: CVE-2020-14343
Fix Release: v2.48.4

Severity

8.1 (High)


                  
                    CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Impacted products

Name	purl
docling-core	pkg:pypi/docling-core

Aliases

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "docling-core",
        "purl": "pkg:pypi/docling-core"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "2.21.0"
            },
            {
              "fixed": "2.48.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.21.0",
        "2.21.1",
        "2.21.2",
        "2.22.0",
        "2.23.0",
        "2.23.1",
        "2.23.2",
        "2.23.3",
        "2.24.0",
        "2.24.1",
        "2.25.0",
        "2.26.0",
        "2.26.1",
        "2.26.2",
        "2.26.3",
        "2.26.4",
        "2.27.0",
        "2.28.0",
        "2.28.1",
        "2.29.0",
        "2.30.0",
        "2.30.1",
        "2.31.0",
        "2.31.1",
        "2.31.2",
        "2.32.0",
        "2.33.0",
        "2.33.1",
        "2.34.0",
        "2.34.1",
        "2.34.2",
        "2.35.0",
        "2.36.0",
        "2.37.0",
        "2.38.0",
        "2.38.1",
        "2.38.2",
        "2.39.0",
        "2.40.0",
        "2.41.0",
        "2.42.0",
        "2.43.0",
        "2.43.1",
        "2.44.0",
        "2.44.1",
        "2.44.2",
        "2.45.0",
        "2.46.0",
        "2.47.0",
        "2.48.0",
        "2.48.1",
        "2.48.2",
        "2.48.3"
      ]
    }
  ],
  "aliases": [
    "CVE-2026-24009",
    "GHSA-vqxf-v2gg-x3hc"
  ],
  "details": "### Impact\n\nA PyYAML-related Remote Code Execution (RCE) vulnerability, namely CVE-2020-14343, is exposed in `docling-core \u003e=2.21.0, \u003c2.48.4` and, specifically only if the application uses `pyyaml \u003c 5.4` and invokes `docling_core.types.doc.DoclingDocument.load_from_yaml()` passing it untrusted YAML data.\n\n### Patches\n\nThe vulnerability has been patched in `docling-core` version **2.48.4**.\nThe fix mitigates the issue by switching `PyYAML` deserialization from `yaml.FullLoader` to `yaml.SafeLoader`, ensuring that untrusted data cannot trigger code execution.\n\n### Workarounds\n\nUsers who cannot immediately upgrade `docling-core` can alternatively ensure that the installed version of `PyYAML` is **5.4 or greater**, which supposedly patches CVE-2020-14343.\n\n### References\n\n* GitHub Issue: #482\n* Upstream Advisory: CVE-2020-14343\n* Fix Release: [v2.48.4](https://github.com/docling-project/docling-core/releases/tag/v2.48.4)",
  "id": "PYSEC-2026-1313",
  "modified": "2026-07-07T17:24:03.048727Z",
  "published": "2026-07-07T16:03:19.816786Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/docling-project/docling-core/security/advisories/GHSA-vqxf-v2gg-x3hc"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24009"
    },
    {
      "type": "WEB",
      "url": "https://github.com/docling-project/docling-core/issues/482"
    },
    {
      "type": "WEB",
      "url": "https://github.com/docling-project/docling-core/commit/3e8d628eeeae50f0f8f239c8c7fea773d065d80c"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/advisories/GHSA-8q59-q68h-6hv4"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/docling-project/docling-core"
    },
    {
      "type": "WEB",
      "url": "https://github.com/docling-project/docling-core/releases/tag/v2.48.4"
    },
    {
      "type": "PACKAGE",
      "url": "https://pypi.org/project/docling-core"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/advisories/GHSA-vqxf-v2gg-x3hc"
    }
  ],
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "docling-core vulnerable to Remote Code Execution via unsafe PyYAML usage"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2026-24009 (GCVE-0-2026-24009)

FKIE_CVE-2026-24009

GHSA-VQXF-V2GG-X3HC

Impact

Patches

Workarounds

References

PYSEC-2026-1313

Impact

Patches

Workarounds

References

Tags

Sightings

Nomenclature

Related by attack behaviour