CVE-2026-44019

Docling Core (docling-core) versions 2.5.0 through before 2.74.1 allow local file:// image references and inline data: content without a decoded-size limit when processing untrusted image references. This could enable access to local files readable by the process or cause excessive memory usage f...

EUVD-2026-45042

Docling Core defines core data types and transformations for the document processing application Docling. In versions 2.5.0 and above, prior to 2.74.1, docling-core could allow local file:// image references and accepted inline data: content without a decoded-size limit. In applications that acce...

CVE-2026-44019 Docling Core has insufficient validation of image reference URIs

Docling Core defines core data types and transformations for the document processing application Docling. In versions 2.5.0 and above, prior to 2.74.1, docling-core could allow local file:// image references and accepted inline data: content without a decoded-size limit. In applications that acce...

CVE-2026-44019 Docling Core has insufficient validation of image reference URIs

Docling Core defines core data types and transformations for the document processing application Docling. In versions 2.5.0 and above, prior to 2.74.1, docling-core could allow local file:// image references and accepted inline data: content without a decoded-size limit. In applications that acce...

agentfoundry (1.2.9.1), axon-ai-agent (>=0.1.0, <=0.1.2) +9 more potentially affected by CVE-2026-44019 via docling-core (>=2.9.0, <=2.74.0)

docling-core PYPI version =2.9.0, =0.1.0, =0.19.2, =0.14.1, =2.0.0, =1.0.1, =0.3.0, =0.42.0, =0.1.0, =0.2.0 Source cves: CVE-2026-44019 Source advisory: MEND:CVE-2026-44019...

CVE-2026-44019: External Control of File Name or Path

Docling Core defines core data types and transformations for the document processing application Docling. In versions 2.5.0 and above, prior to 2.74.1, docling-core could allow local file:// image references and accepted inline data: content without a decoded-size limit. In applications that acce...

CVE-2026-44023: Improper Limitation of a Pathname to a Restricted Directory

Docling Core defines core data types and transformations for the document processing application Docling. In versions 1.5.0 and above, prior to 2.74.1, docling-core did not sufficiently restrict remote request destinations and could resolve a server-provided Content-Disposition to a local path in...

camel-docling Apache Camel Data Compromise

The vulnerability of the camel-docling component in the Apache Camel framework is related to the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor to influence the confidentiality and integrity of the protected information from a remote location...

PYSEC-2026-2457 Docling Core: Unsafe remote filename resolution

Impact In versions = 1.5.0, = 2.74.1 Workarounds If upgrading is not immediately possible, avoid passing untrusted URLs into remote fetch functionality. References - Fix release: v2.74.1...

agentfoundry (1.2.9.1), axon-ai-agent (>=0.1.0, <=0.1.2) +16 more potentially affected by CVE-2026-44023 via docling-core (>=1.7.2, <=2.74.0)

docling-core PYPI version =1.7.2, =0.1.0, =0.2.1.dev0, =0.2.1.dev0, =1.0.0, =1.0.0, =0.19.2, =0.14.1, =2.0.0, =1.0.1, =0.3.0, =0.0.1, =0.4.1 and more Source cves: CVE-2026-44023 Source advisory: OSV:PYSEC-2026-2457...

PYSEC-2026-2456 Docling Core: Insufficient validation of image reference URIs

Impact In versions = 2.5.0, = 2.74.1 Workarounds If upgrading is not immediately possible: - reject file: and data: image references from untrusted input - allow only approved local or remote image sources - apply input size and memory limits to processing workers References - Fix release: v2.74....

agentfoundry (1.2.9.1), axon-ai-agent (>=0.1.0, <=0.1.2) +9 more potentially affected by CVE-2026-44019 via docling-core (>=2.9.0, <=2.74.0)

docling-core PYPI version =2.9.0, =0.1.0, =0.19.2, =0.14.1, =2.0.0, =1.0.1, =0.3.0, =0.42.0, =0.1.0, =0.2.0 Source cves: CVE-2026-44019 Source advisory: OSV:PYSEC-2026-2456...

Docling Core: Unsafe remote filename resolution

ImpactIn versions = 1.5.0, = 2.74.1 WorkaroundsIf upgrading is not immediately possible, avoid passing untrusted URLs into remote fetch functionality. References- Fix release: v2.74.1...

agentfoundry (1.2.9.1), instructlab-sdg (>=0.6.2, <=0.7.2) +14 more potentially affected by CVE-2026-31248 via docling (>=2.8.1, <=2.55.0)

docling PYPI version =2.8.1, =0.6.2, =2.0.0, =0.1.0, =0.2.1, =0.6.1, =1.0.1, =0.3.0, =0.3.1, =0.10.0, =0.2.1, =0.1.0, =1.3.41 - rakam-systems 0.2.4 and more Source cves: CVE-2026-31248 Source advisory: OSV:PYSEC-2026-2454...

data-prep-toolkit-transforms (>=0.2.1.dev3, <=0.2.1) potentially affected by CVE-2026-31248 via docling (1.11.0)

docling PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - data-prep-toolkit-transforms =0.2.1.dev3, =0.2.1 Source cves: CVE-2026-31248 Source advisory: OSV:PYSEC-2026-2454...

data-prep-toolkit-transforms (>=0.2.1.dev0, <=0.2.1.dev2), data-prep-toolkit-transforms-ray (>=0.2.1.dev0, <=0.2.1.dev2) potentially affected by CVE-2026-31248 via docling (1.1.2)

docling PYPI version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - data-prep-toolkit-transforms =0.2.1.dev0, =0.2.1.dev0, =0.2.1.dev2 Source cves: CVE-2026-31248 Source advisory: OSV:PYSEC-2026-2454...

Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks

Docling's METS GBS backend is vulnerable to XML Entity Expansion XXE attacks thru 2.61.0. The backend extracts and validates XML files from .tar.gz archives using etree.fromstring without disabling entity resolution. An attacker can craft a malicious XML file with nested entity definitions XML Bo...

PYSEC-2026-2454 Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks

Docling's METS GBS backend is vulnerable to XML Entity Expansion XXE attacks thru 2.61.0. The backend extracts and validates XML files from .tar.gz archives using etree.fromstring without disabling entity resolution. An attacker can craft a malicious XML file with nested entity definitions XML Bo...

llama-index-readers-docling (0.1.0), quackling (>=0.0.1, <=0.4.1) potentially affected by CVE-2026-31248 via docling (1.20.0)

docling PYPI version 1.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - llama-index-readers-docling 0.1.0 - quackling =0.0.1, =0.4.1 Source cves: CVE-2026-31248 Source advisory: OSV:PYSEC-2026-2454...

llama-index-readers-docling (0.1.0), quackling (>=0.0.1, <=0.4.1) potentially affected by CVE-2026-31247 via docling (1.20.0)

docling PYPI version 1.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - llama-index-readers-docling 0.1.0 - quackling =0.0.1, =0.4.1 Source cves: CVE-2026-31247 Source advisory: OSV:PYSEC-2026-2455...