Vulnerability in docling-project docling-core

[ Description ]Official description

docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allow_image_file_uri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported with ImageRefMode.EMBEDDED or rendered to HTML, embeds readable local image files as base64 and reveals path existence.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References

• github.com/docling-project/docling-core/blob/v2.102.0/docling_core/types/doc/common/ref…
• github.com/docling-project/docling-core/blob/v2.102.0/docling_core/types/doc/document.py
• github.com/docling-project/docling-core/commit/f952fc5d4c68fb673043c7c9f9c4390052959517
• github.com/docling-project/docling-core/pull/900
• github.com/docling-project/docling-core/releases/tag/v2.103.0
• github.com/docling-project/docling-core/security/advisories/GHSA-jx5c-6gmw-72m3
• www.vulncheck.com/advisories/docling-core-through-2.102.0-local-file-disclosure-via-pla…