PYSEC-2026-2145

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.73.0 until 2.91.0, he LaTeX backend's handling of \includegraphics, \input, and \include commands lacked path containment validation. Attackers could craft malicio...

CVE-2026-44020

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.13.0 until 2.74.0, the USPTO patent XML parser used the standard xml.sax.parseString without protection against XML External Entity XXE attacks. An attacker could...

agentfoundry (1.2.9.1), haiku-rag (>=0.19.2, <=0.33.0) +21 more potentially affected by CVE-2026-44020 via docling (>=2.17.0, <=2.73.1)

docling PYPI version =2.17.0, =0.19.2, =1.40.0, =2.0.0, =0.1.0, =0.2.1, =0.6.1, =1.0.14, =0.3.0, =1.0.0, =2026.2.27, =0.3.1, =0.4.0 and more Source cves: CVE-2026-44020 Source advisory: OSV:PYSEC-2026-240...

ai4rag (>=0.8.0, <=0.8.1), auto-survey (>=0.1.0, <=0.3.1) +7 more potentially affected by CVE-2026-44022 via docling (>=2.73.1, <=2.90.0)

docling PYPI version =2.73.1, =0.8.0, =0.1.0, =0.1.0, =0.30.1, =0.0.1, =2026.2.27, =0.1.0, =0.0.1, =0.0.2 Source cves: CVE-2026-44022 Source advisory: OSV:PYSEC-2026-2145...

PYSEC-2026-2142

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. FIn versions = 2.82.0, 2.91.0, if the HTML backend was explicitly configured for rendering rendering option by default deactivated, then the Playwright-based rendering...

ai4rag (>=0.8.0, <=0.8.1), auto-survey (>=0.1.0, <=0.3.1) +6 more potentially affected by CVE-2026-44016 via docling (>=2.82.0, <=2.90.0)

docling PYPI version =2.82.0, =0.8.0, =0.1.0, =0.1.0, =0.40.0, =0.0.1, =0.1.0, =0.0.1, =0.0.2 Source cves: CVE-2026-44016 Source advisory: OSV:PYSEC-2026-2142...

agentfoundry (1.2.9.1), ai4rag (>=0.8.0, <=0.8.1) +33 more potentially affected by CVE-2026-44017 via docling (>=1.1.2, <=2.90.0)

docling PYPI version =1.1.2, =0.8.0, =0.1.0, =0.1.0, =0.2.1.dev0, =0.2.1.dev0, =0.19.2, =1.40.0, =0.6.2, =2.0.0, =0.0.1, =0.1.0, =0.2.1, =0.6.1, =0.6.3 and more Source cves: CVE-2026-44017 Source advisory: MEND:CVE-2026-44017...

CVE-2026-44017 Docling: Unsafe Zip Extraction in EasyOCR Model Download

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.91.0, the EasyOCR model download functionality extracted ZIP archives without validating member paths, enabling Zip Slip attacks. If an attacker could compromi...

CVE-2026-44017 Docling: Unsafe Zip Extraction in EasyOCR Model Download

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.91.0, the EasyOCR model download functionality extracted ZIP archives without validating member paths, enabling Zip Slip attacks. If an attacker could compromi...

EUVD-2026-39006

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.91.0, the EasyOCR model download functionality extracted ZIP archives without validating member paths, enabling Zip Slip attacks. If an attacker could compromi...

CVE-2026-44017

CVE-2026-44017 concerns Docling’s EasyOCR model download: prior to 2.91.0, ZIP archives were extracted without validating member paths, enabling Zip Slip path traversal. An attacker who could supply or intercept the model source could overwrite files anywhere writable by the process, potentially ...

CVE-2026-44022 Docling: Potential Path Traversal via LaTeX \includegraphics and \input Commands

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.73.0 until 2.91.0, he LaTeX backend's handling of \includegraphics, \input, and \include commands lacked path containment validation. Attackers could craft malicio...

ai4rag (>=0.8.0, <=0.8.1), auto-survey (>=0.1.0, <=0.3.1) +7 more potentially affected by CVE-2026-44022 via docling (>=2.73.1, <=2.90.0)

docling PYPI version =2.73.1, =0.8.0, =0.1.0, =0.1.0, =0.30.1, =0.0.1, =2026.2.27, =0.1.0, =0.0.1, =0.0.2 Source cves: CVE-2026-44022 Source advisory: MEND:CVE-2026-44022...

CVE-2026-44022

Docling’s LaTeX backend (versions 2.73.0–2.91.0) fails to validate path containment for includegraphics, input, and include commands, enabling path traversal to read arbitrary files accessible to the process and potentially embed sensitive data in converted output. The root cause is insufficient ...

CVE-2026-44022 Docling: Potential Path Traversal via LaTeX \includegraphics and \input Commands

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.73.0 until 2.91.0, he LaTeX backend's handling of \includegraphics, \input, and \include commands lacked path containment validation. Attackers could craft malicio...

CVE-2026-44020 Docling: Unsafe XML Entity Expansion in USPTO Patent Backend

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.13.0 until 2.74.0, the USPTO patent XML parser used the standard xml.sax.parseString without protection against XML External Entity XXE attacks. An attacker could...

agentfoundry (1.2.9.1), haiku-rag (>=0.19.2, <=0.33.0) +21 more potentially affected by CVE-2026-44020 via docling (>=2.17.0, <=2.73.1)

docling PYPI version =2.17.0, =0.19.2, =1.40.0, =2.0.0, =0.1.0, =0.2.1, =0.6.1, =1.0.14, =0.3.0, =1.0.0, =2026.2.27, =0.3.1, =0.4.0 and more Source cves: CVE-2026-44020 Source advisory: MEND:CVE-2026-44020...

EUVD-2026-39003

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. FIn versions = 2.82.0, 2.91.0, if the HTML backend was explicitly configured for rendering rendering option by default deactivated, then the Playwright-based rendering...

CVE-2026-44016

Docling (Python SDK) versions 2.82.0–2.90.x are affected when the HTML backend is explicitly enabled for rendering. The Playwright-based rendering had a vulnerability that could allow JavaScript execution and unrestricted network access in the rendering context for untrusted HTML, enabling potent...

CVE-2026-44016 Docling: Unsafe Playwright-based HTML Rendering

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. FIn versions = 2.82.0, 2.91.0, if the HTML backend was explicitly configured for rendering rendering option by default deactivated, then the Playwright-based rendering...