| Package | Affected versions | Patched versions |
|---|---|---|
| docling-core | ≥ 1.5.0, < 2.74.1 | 2.74.1 |
| docling-core | ≥ 1.5.0, < 2.74.1 | 2.74.1 |
In versions >= 1.5.0, < 2.74.1, docling-core did not sufficiently restrict remote request destinations and could resolve a server-provided Content-Disposition to a local path in an unsafe manner.
In applications that accept untrusted URLs, this could allow SSRF attacks targeting local files outside the user-defined cache directory.
Patched in docling-core 2.74.1.
The fix adds stricter validation for remote destinations and normalizes server-provided filenames before use.
Users should upgrade to:
docling-core >= 2.74.1If upgrading is not immediately possible, avoid passing untrusted URLs into remote fetch functionality.
v2.74.1Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free