document-ingestion

• CVE-2026-44023 - Docling Core remote filename SSRF 2026-06-08
• CVE-2026-47214 - Docling HTML backend URI and path handling 2026-06-07