EUVD-2026-92803

Docling has SSRF guard bypass in remote resource fetching DNS rebinding / multi-record resolution; no IP validation in HTML render mode...

EUVD-2026-92809

Docling: METS-GBS archive member limit enforced after full member enumeration memory exhaustion during format detection...

GHSA-F4CH-VXWC-3P2M Duplicate Advisory: Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-3cr3-8m4c-fpxw. This link is maintained to preserve external references. Original Description Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI...

Duplicate Advisory: Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-3cr3-8m4c-fpxw. This link is maintained to preserve external references. Original Description Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview docling-slim is a Modular version of the Docling package: SDK and CLI for parsing PDF, DOCX, HTML, and more, to a unified document representation for powering downstream workflows such as gen AI applications. Affected versions of this package are vulnerable to Improper Handling of Highly...

Docling: Arbitrary local file read via draw:image xlink:href in the OpenDocument backend

Summary The ODF backend resolves the xlink:href of a draw:image element as a filesystem path whenever the referenced part is not found inside the document archive. The value comes straight from content.xml, so it is document content, and it is used with no scheme check, no confinement to the...

CVE-2026-105751

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.107.0 until 2.120.3, docling/backend/opendocumentbackend.py uses the xlink:href attribute value of a draw:image element as a filesystem path when the referenced pa...

PYSEC-2026-4190

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.91.0 until 2.132.0, validateurlsafety in docling/backend/utils/imageresourceloader.py validates a hostname with a single IPv4 lookup and then allows the HTTP clien...

PYSEC-2026-4194

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.131.0, METS-GBS format detection in docling/datamodel/document.py and the backend in docling/backend/metsgbsbackend.py call tarfile.TarFile.getmembers...

PYSEC-2026-4194

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.131.0, METS-GBS format detection in docling/datamodel/document.py and the backend in docling/backend/metsgbsbackend.py call tarfile.TarFile.getmembers...

PYSEC-2026-4190

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.91.0 until 2.132.0, validateurlsafety in docling/backend/utils/imageresourceloader.py validates a hostname with a single IPv4 lookup and then allows the HTTP clien...

CVE-2026-105743

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.91.0 until 2.132.0, validateurlsafety in docling/backend/utils/imageresourceloader.py validates a hostname with a single IPv4 lookup and then allows the HTTP clien...

CVE-2026-105747

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.131.0, METS-GBS format detection in docling/datamodel/document.py and the backend in docling/backend/metsgbsbackend.py call tarfile.TarFile.getmembers...

CVE-2026-105748

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.16.0 until 2.131.0, the InputFormat.JSONDOCLING backend in docling/backend/json/doclingjsonbackend.py validates serialized DoclingDocument input without rejecting...

CVE-2026-105747 Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.131.0, METS-GBS format detection in docling/datamodel/document.py and the backend in docling/backend/metsgbsbackend.py call tarfile.TarFile.getmembers...

CVE-2026-105747 Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.131.0, METS-GBS format detection in docling/datamodel/document.py and the backend in docling/backend/metsgbsbackend.py call tarfile.TarFile.getmembers...

CVE-2026-105747 Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.131.0, METS-GBS format detection in docling/datamodel/document.py and the backend in docling/backend/metsgbsbackend.py call tarfile.TarFile.getmembers...

CVE-2026-105747

The Docling library (versions 2.45.0 to 2.131.0 ) is vulnerable to memory exhaustion during METS-GBS format detection. The vulnerability exists because the components docling/datamodel/document.py and docling/backend/mets_gbs_backend.py call tarfile.TarFile.getmembers() before enforcing the max_m...

CVE-2026-105743: Time-of-check Time-of-use (TOCTOU) Race Condition

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.91.0 until 2.132.0, validateurlsafety in docling/backend/utils/imageresourceloader.py validates a hostname with a single IPv4 lookup and then allows the HTTP clien...

PT-2026-106246

Name of the Vulnerable Software and Affected Versions Docling versions 2.91.0 through 2.131.0 Description The validate url safety function in docling/backend/utils/image resource loader.py performs a single IPv4 lookup to validate a hostname but subsequently allows the HTTP client to resolve and...