[ Vendor · 11 CVEs ]
docling-project
CVEs affecting docling-project published in the last 30 days, plus any docling-project CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-112310 | 19 Oct 2026 | CVSS 4.3 | docling-project docling-coredocling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain… | |
| CVE-2026-105750 | 5 Oct 2026 | CVSS 7.5 | Docling: `enable_local_fetch` is not enforced in HTML browser-rendering modeDocling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.82.0 until… | Fix |
| CVE-2026-105751 | 5 Oct 2026 | CVSS 7.5 | Docling: Arbitrary local file read via draw:image xlink:href in the OpenDocument backendDocling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.107.0 until… | Fix |
| CVE-2026-105743 | 5 Oct 2026 | CVSS 5.8 | Docling has SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resolution; no IP validation in HTML render mode)Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.91.0 until… | Fix |
| CVE-2026-105744 | 5 Oct 2026 | CVSS 8.8 | Docling has arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engineDocling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.94.0 until… | Fix |
| CVE-2026-105745 | 5 Oct 2026 | CVSS 7.8 | Docling imports plugin entry points before the allow_external_plugins checkDocling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.27.0 until… | Fix |
| CVE-2026-105746 | 5 Oct 2026 | CVSS 5.3 | docling-project doclingDocling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.83.0 until… | Fix |
| CVE-2026-105747 | 5 Oct 2026 | CVSS 4.3 | Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until… | Fix |
| CVE-2026-105748 | 5 Oct 2026 | CVSS 4.3 | Docling: Crafted DoclingDocument JSON embeds local image files into converted outputDocling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.16.0 until… | Fix |
| CVE-2026-105749 | 5 Oct 2026 | CVSS 6.5 | Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustionDocling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.0.0 until… | Fix |
| CVE-2026-105742 | 5 Oct 2026 | CVSS 5.3 | Docling: Configured HTTP headers sent to every remote image host named by a documentDocling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.95.0 until… | Fix |