481 matches found
PT-2026-106249
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.83.0 until 2.131.0, the KServeV2OcrModel class defined in docling/models/stages/ocr/kserve v2 ocr model.py sends page images to its configured endpoint without...
PT-2026-106252
Name of the Vulnerable Software and Affected Versions Docling versions 2.0.0 through 2.130.0 Description The HTML, JATS, OpenDocument spreadsheet, and BoxNote backends, including docling/backend/html backend.py, docling/backend/jats backend.py, and docling/backend/boxnote backend.py, process...
PT-2026-106250
Name of the Vulnerable Software and Affected Versions Docling versions 2.45.0 through 2.130.0 Description METS-GBS format detection in docling/datamodel/document.py and the backend in docling/backend/mets gbs backend.py call the tarfile.TarFile.getmembers function before enforcing the max member...
PT-2026-106248
Name of the Vulnerable Software and Affected Versions Docling versions 2.27.0 through 2.130.0 Description Plugin factories in docling/models/factories/base factory.py call the load setuptools entrypoints function before the allow external plugins setting is applied. This sequence allows every...
PT-2026-106254
Name of the Vulnerable Software and Affected Versions Docling versions 2.107.0 through 2.120.2 Description In the ODF backend, the software improperly handles the xlink:href attribute of a draw:image element. When a referenced part is not found within the document archive, the image ref from odf...
PT-2026-106253
Name of the Vulnerable Software and Affected Versions Docling versions 2.82.0 through 2.118.0 Description When the HTML backend renders pages in a headless browser using HTMLBackendOptionsrender page=True, the enable local fetch option is not enforced. The function HTMLDocumentBackend. get browse...
PT-2026-106247
Name of the Vulnerable Software and Affected Versions Docling versions 2.94.0 through 2.131.0 Description When users enable LatexBackendOptionstikz engine="tectonic", the system uses docling/backend/latex/engines/tectonic.py to compile TikZ bodies and document preambles without restricting TeX fi...
PT-2026-106245
Name of the Vulnerable Software and Affected Versions Docling versions 2.95.0 through 2.131.0 Description The HTML image resource loader in docling/backend/utils/image resource loader.py forwards headers configured via the HTMLBackendOptions.headers setting to every remote image URL specified by ...
PT-2026-106251
Name of the Vulnerable Software and Affected Versions Docling versions 2.16.0 through 2.130.0 Description The InputFormat.JSON DOCLING backend in docling/backend/json/docling json backend.py fails to reject picture image references containing local paths or file URIs during the validation of...
CVE-2026-44023
Docling Core defines core data types and transformations for the document processing application Docling. In versions 1.5.0 and above, prior to 2.74.1, docling-core did not sufficiently restrict remote request destinations and could resolve a server-provided Content-Disposition to a local path in...
CVE-2026-44019
Docling Core defines core data types and transformations for the document processing application Docling. In versions 2.5.0 and above, prior to 2.74.1, docling-core could allow local file:// image references and accepted inline data: content without a decoded-size limit. In applications that acce...
EUVD-2026-45043
Docling Core defines core data types and transformations for the document processing application Docling. In versions 1.5.0 and above, prior to 2.74.1, docling-core did not sufficiently restrict remote request destinations and could resolve a server-provided Content-Disposition to a local path in...
CVE-2026-44023 Docling Core has unsafe remote filename resolution
Docling Core defines core data types and transformations for the document processing application Docling. In versions 1.5.0 and above, prior to 2.74.1, docling-core did not sufficiently restrict remote request destinations and could resolve a server-provided Content-Disposition to a local path in...
agentfoundry (1.2.9.1), axon-ai-agent (>=0.1.0, <=0.1.2) +16 more potentially affected by CVE-2026-44023 via docling-core (>=1.7.2, <=2.74.0)
docling-core PYPI version =1.7.2, =0.1.0, =0.2.1.dev0, =0.2.1.dev0, =1.0.0, =1.0.0, =0.19.2, =0.14.1, =2.0.0, =1.0.1, =0.3.0, =0.0.1, =0.4.1 and more Source cves: CVE-2026-44023 Source advisory: MEND:CVE-2026-44023...
CVE-2026-44023 Docling Core has unsafe remote filename resolution
Docling Core defines core data types and transformations for the document processing application Docling. In versions 1.5.0 and above, prior to 2.74.1, docling-core did not sufficiently restrict remote request destinations and could resolve a server-provided Content-Disposition to a local path in...
CVE-2026-44023
Docling Core defines core data types and transformations for the document processing application Docling. In versions 1.5.0 and above, prior to 2.74.1, docling-core did not sufficiently restrict remote request destinations and could resolve a server-provided Content-Disposition to a local path in...
CVE-2026-44023 Docling Core has unsafe remote filename resolution
Docling Core defines core data types and transformations for the document processing application Docling. In versions 1.5.0 and above, prior to 2.74.1, docling-core did not sufficiently restrict remote request destinations and could resolve a server-provided Content-Disposition to a local path in...
CVE-2026-44023
Docling Core (docling-core) versions >= 1.5.0 and = 2.74.1 is recommended. If upgrading isn’t immediately possible, a workaround is to avoid passing untrusted URLs into remote fetch functionality. There is no exploitation detail in the provided documents, and no in‑the‑wild exploit information...
agentfoundry (1.2.9.1), axon-ai-agent (>=0.1.0, <=0.1.2) +9 more potentially affected by CVE-2026-44019 via docling-core (>=2.9.0, <=2.74.0)
docling-core PYPI version =2.9.0, =0.1.0, =0.19.2, =0.14.1, =2.0.0, =1.0.1, =0.3.0, =0.42.0, =0.1.0, =0.2.0 Source cves: CVE-2026-44019 Source advisory: MEND:CVE-2026-44019...
CVE-2026-44019 Docling Core has insufficient validation of image reference URIs
Docling Core defines core data types and transformations for the document processing application Docling. In versions 2.5.0 and above, prior to 2.74.1, docling-core could allow local file:// image references and accepted inline data: content without a decoded-size limit. In applications that acce...