data-prep-toolkit-transforms (>=0.2.1.dev3, <=0.2.1) potentially affected by CVE-2026-31247 via docling (1.11.0)

docling PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - data-prep-toolkit-transforms =0.2.1.dev3, =0.2.1 Source cves: CVE-2026-31247 Source advisory: OSV:PYSEC-2026-2455...

PYSEC-2026-2455 Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks

Docling's JATS XML backend is vulnerable to XML Entity Expansion XXE attacks thru 2.61.0. The backend uses etree.parse to parse XML files without disabling entity resolution. An attacker can craft a malicious XML file containing a nested entity expansion payload XML Bomb. When processed by Doclin...

Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks

Docling's JATS XML backend is vulnerable to XML Entity Expansion XXE attacks thru 2.61.0. The backend uses etree.parse to parse XML files without disabling entity resolution. An attacker can craft a malicious XML file containing a nested entity expansion payload XML Bomb. When processed by Doclin...

agentfoundry (1.2.9.1), instructlab-sdg (>=0.6.2, <=0.7.2) +14 more potentially affected by CVE-2026-31247 via docling (>=2.8.1, <=2.55.0)

docling PYPI version =2.8.1, =0.6.2, =2.0.0, =0.1.0, =0.2.1, =0.6.1, =1.0.1, =0.3.0, =0.3.1, =0.10.0, =0.2.1, =0.1.0, =1.3.41 - rakam-systems 0.2.4 and more Source cves: CVE-2026-31247 Source advisory: OSV:PYSEC-2026-2455...

data-prep-toolkit-transforms (>=0.2.1.dev0, <=0.2.1.dev2), data-prep-toolkit-transforms-ray (>=0.2.1.dev0, <=0.2.1.dev2) potentially affected by CVE-2026-31247 via docling (1.1.2)

docling PYPI version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - data-prep-toolkit-transforms =0.2.1.dev0, =0.2.1.dev0, =0.2.1.dev2 Source cves: CVE-2026-31247 Source advisory: OSV:PYSEC-2026-2455...

docling-graph has SSRF via Missing Internal IP Validation in URLInputHandler

ImpactThe URLInputHandler class in doclinggraph/core/input/handlers.py makes HTTP requests to user-supplied URLs without validating whether the target resolves to a private, loopback, or link-local IP address. The URLValidator only checks for a valid scheme and non-empty netloc, performing no...

PYSEC-2026-2458 docling-graph has SSRF via Missing Internal IP Validation in URLInputHandler

Impact The URLInputHandler class in doclinggraph/core/input/handlers.py makes HTTP requests to user-supplied URLs without validating whether the target resolves to a private, loopback, or link-local IP address. The URLValidator only checks for a valid scheme and non-empty netloc, performing no...

datapizza-ai-parsers-azure (0.0.2), datapizza-ai-parsers-docling (0.0.2) +1 more potentially affected by CVE-2026-2969 via datapizza-ai-core (0.0.1)

datapizza-ai-core PYPI version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on datapizza-ai-core and may be impacted: - datapizza-ai-parsers-azure 0.0.2 - datapizza-ai-parsers-docling 0.0.2 - datapizza-ai-tools-duckduckgo 0.0.2 Source cves:...

datapizza-ai-parsers-azure (0.0.2), datapizza-ai-parsers-docling (0.0.2) +1 more potentially affected by CVE-2026-2970 via datapizza-ai-core (0.0.1)

datapizza-ai-core PYPI version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on datapizza-ai-core and may be impacted: - datapizza-ai-parsers-azure 0.0.2 - datapizza-ai-parsers-docling 0.0.2 - datapizza-ai-tools-duckduckgo 0.0.2 Source cves:...

Exploit for Argument Injection in Apache Camel

─── CVE-2026-40047 ─── 🏴 AMN SECURITY 🏴 مركز أب...

PT-2026-59127

Impact The URLInputHandler class in docling graph/core/input/handlers.py makes HTTP requests to user-supplied URLs without validating whether the target resolves to a private, loopback, or link-local IP address. The URLValidator only checks for a valid scheme and non-empty netloc, performing no...

PT-2026-59123

Docling's METS GBS backend is vulnerable to XML Entity Expansion XXE attacks thru 2.61.0. The backend extracts and validates XML files from .tar.gz archives using etree.fromstring without disabling entity resolution. An attacker can craft a malicious XML file with nested entity definitions XML Bo...

PT-2026-59126

Impact In versions = 1.5.0, = 2.74.1 Workarounds If upgrading is not immediately possible, avoid passing untrusted URLs into remote fetch functionality. References - Fix release: v2.74.1...

PT-2026-59125

Impact In versions = 2.5.0, = 2.74.1 Workarounds If upgrading is not immediately possible: - reject file: and data: image references from untrusted input - allow only approved local or remote image sources - apply input size and memory limits to processing workers References - Fix release: v2.74....

PT-2026-59124

Docling's JATS XML backend is vulnerable to XML Entity Expansion XXE attacks thru 2.61.0. The backend uses etree.parse to parse XML files without disabling entity resolution. An attacker can craft a malicious XML file containing a nested entity expansion payload XML Bomb. When processed by Doclin...

Exploit for CVE-2026-40047

camel-docling CLI Argument Injection / Path Traversal Reproduc...

CVE-2026-40047

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Apache Camel Docling component. The camel-docling component invokes the external docling command-line tool by assembling an argument list in DoclingProducer and executing it through...

io4it (>=2.0.0, <=3.0.4.1), leettools (>=1.0.14, <=1.0.17) potentially affected by CVE-2026-24009 via docling-core (>=2.21.1, <=2.26.3)

docling-core PYPI version =2.21.1, =2.0.0, =1.0.14, =1.0.17 Source cves: CVE-2026-24009 Source advisory: OSV:PYSEC-2026-1313...

PYSEC-2026-1313 docling-core vulnerable to Remote Code Execution via unsafe PyYAML usage

Impact A PyYAML-related Remote Code Execution RCE vulnerability, namely CVE-2020-14343, is exposed in docling-core =2.21.0, 2.48.4 and, specifically only if the application uses pyyaml 5.4 and invokes doclingcore.types.doc.DoclingDocument.loadfromyaml passing it untrusted YAML data. Patches The...

docling-core vulnerable to Remote Code Execution via unsafe PyYAML usage

ImpactA PyYAML-related Remote Code Execution RCE vulnerability, namely CVE-2020-14343, is exposed in docling-core =2.21.0, 2.48.4 and, specifically only if the application uses pyyaml 5.4 and invokes doclingcore.types.doc.DoclingDocument.loadfromyaml passing it untrusted YAML data. PatchesThe...