Executive brief
docling-core vulnerable to Remote Code Execution via unsafe PyYAML usage
Affected products
- PyPI docling-core
Junglewise Threat Intelligence
CVE-2026-24009: PYSEC-2026-1313 - docling-core vulnerable to Remote Code Execution via unsafe PyYAML usage
CVE-2026-24009 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: docling-core (PyPI). Vendors: PyPI.