A vulnerability classified as problematic was found in docling-project docling-core up to 2.48.3. This affects the function
docling_core.types.doc.DoclingDocument.load_from_yaml. Executing a manipulation can lead to deserialization.
This vulnerability appears as CVE-2026-24009. The attack may be performed from remote. There is no available exploit.
Upgrading the affected component is advised.
