CVE-2026-44019

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-44019", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-05-04T21:24:36.506Z", "datePublished": "2026-07-16T20:50:08.807Z", "dateUpdated": "2026-07-17T17:50:50.083Z"}, "containers": {"cna": {"title": "Docling Core has insufficient validation of image reference URIs", "problemTypes": [{"descriptions": [{"cweId": "CWE-73", "lang": "en", "description": "CWE-73: External Control of File Name or Path", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-400", "lang": "en", "description": "CWE-400: Uncontrolled Resource Consumption", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/docling-project/docling-core/security/advisories/GHSA-j5xp-7m2f-49jv", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/docling-project/docling-core/security/advisories/GHSA-j5xp-7m2f-49jv"}, {"name": "https://github.com/docling-project/docling-core/releases/tag/v2.74.1", "tags": ["x_refsource_MISC"], "url": "https://github.com/docling-project/docling-core/releases/tag/v2.74.1"}], "affected": [{"vendor": "docling-project", "product": "docling-core", "versions": [{"version": ">= 2.5.0, < 2.74.1", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-07-16T20:50:08.807Z"}, "descriptions": [{"lang": "en", "value": "Docling Core defines core data types and transformations for the document processing application Docling. In versions 2.5.0 and above, prior to 2.74.1, docling-core could allow local file:// image references and accepted inline data: content without a decoded-size limit. In applications that accept untrusted image references, this may allow access to local files readable by the process or excessive memory use from large inline payloads. This issue has been fixed in version 2.74.1."}], "source": {"advisory": "GHSA-j5xp-7m2f-49jv", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-17T17:50:27.693934Z", "id": "CVE-2026-44019", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-17T17:50:50.083Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-44019", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-17T17:50:27.693934Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-17T17:50:34.572Z"}}], "cna": {"title": "Docling Core has insufficient validation of image reference URIs", "source": {"advisory": "GHSA-j5xp-7m2f-49jv", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "docling-project", "product": "docling-core", "versions": [{"status": "affected", "version": ">= 2.5.0, < 2.74.1"}]}], "references": [{"url": "https://github.com/docling-project/docling-core/security/advisories/GHSA-j5xp-7m2f-49jv", "name": "https://github.com/docling-project/docling-core/security/advisories/GHSA-j5xp-7m2f-49jv", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/docling-project/docling-core/releases/tag/v2.74.1", "name": "https://github.com/docling-project/docling-core/releases/tag/v2.74.1", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Docling Core defines core data types and transformations for the document processing application Docling. In versions 2.5.0 and above, prior to 2.74.1, docling-core could allow local file:// image references and accepted inline data: content without a decoded-size limit. In applications that accept untrusted image references, this may allow access to local files readable by the process or excessive memory use from large inline payloads. This issue has been fixed in version 2.74.1."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-73", "description": "CWE-73: External Control of File Name or Path"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-400", "description": "CWE-400: Uncontrolled Resource Consumption"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-07-16T20:50:08.807Z"}}}, "cveMetadata": {"cveId": "CVE-2026-44019", "state": "PUBLISHED", "dateUpdated": "2026-07-17T17:50:50.083Z", "dateReserved": "2026-05-04T21:24:36.506Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-07-16T20:50:08.807Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "docling-core", "vendor": "docling-project", "versions": [{"status": "affected", "version": ">= 2.5.0, < 2.74.1"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Docling Core defines core data types and transformations for the document processing application Docling. In versions 2.5.0 and above, prior to 2.74.1, docling-core could allow local file:// image references and accepted inline data: content without a decoded-size limit. In applications that accept untrusted image references, this may allow access to local files readable by the process or excessive memory use from large inline payloads. This issue has been fixed in version 2.74.1."}, {"lang": "es", "value": "Docling Core define los tipos de datos centrales y las transformaciones para la aplicaci\u00f3n de procesamiento de documentos Docling. En las versiones 2.5.0 y superiores, anteriores a la 2.74.1, docling-core pod\u00eda permitir referencias de imagen locales file: // y aceptaba contenido data: en l\u00ednea sin un l\u00edmite de tama\u00f1o decodificado. En aplicaciones que aceptan referencias de imagen no confiables, esto puede permitir el acceso a archivos locales legibles por el proceso o un uso excesivo de memoria debido a grandes cargas \u00fatiles en l\u00ednea. Este problema ha sido solucionado en la versi\u00f3n 2.74.1."}], "id": "CVE-2026-44019", "lastModified": "2026-10-24T20:10:00.137", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.2, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-44019", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-07-17T17:50:27.693934Z", "version": "2.0.3"}}]}, "published": "2026-07-16T21:17:20.917", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/docling-project/docling-core/releases/tag/v2.74.1"}, {"source": "security-advisories@github.com", "url": "https://github.com/docling-project/docling-core/security/advisories/GHSA-j5xp-7m2f-49jv"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-73"}, {"lang": "en", "value": "CWE-400"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2.5.0,2.74.1)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "docling-core", "source": "cna", "vendor": "docling-project"}, "product": "docling-core", "vendor": "docling-project"}], "created": "2026-07-16T22:30:06.641508+00:00", "updated": "2026-07-31T01:30:05.613257+00:00", "vendors": ["docling-project", "docling-project$PRODUCT$docling-core"]}