These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-44023 is a Server-Side Request Forgery (SSRF) vulnerability in Docling Core, a document processing application component. Versions 1.5.0 and above, prior to 2.74.1, are affected. The vulnerability allows attackers to access local files outside the user-defined cache directory by manipulating the Content-Disposition header. This issue has been fixed in version 2.74.1.
CVE-2026-44017 is a high-severity vulnerability in Docling, a document processing tool, that allows for arbitrary file writes and potential remote code execution. The vulnerability exists in the EasyOCR model download functionality prior to version 2.91.0, where ZIP archives are extracted without validating member paths, enabling Zip Slip attacks. If an attacker can compromise the model download source, t [truncated]