XML External Entity Injection

Overview docling is a SDK and CLI for parsing PDF, DOCX, HTML, and more, to a unified document representation for powering downstream workflows such as gen AI applications. Affected versions of this package are vulnerable to XML External Entity Injection in the METS-GBS backend's XML parsing and...

Server-side Request Forgery (SSRF)

Overview docling is a SDK and CLI for parsing PDF, DOCX, HTML, and more, to a unified document representation for powering downstream workflows such as gen AI applications. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the HTML rendering process when the...

ai4rag (>=0.8.0, <=0.8.1), auto-survey (>=0.1.0, <=0.3.1) +6 more potentially affected by CVE-2026-44016 via docling (>=2.82.0, <=2.90.0)

docling PYPI version =2.82.0, =0.8.0, =0.1.0, =0.1.0, =0.40.0, =0.0.1, =0.1.0, =0.0.1, =0.0.2 Source cves: CVE-2026-44016 Source advisory: GHSA-PJ2V-GGQH-CMQ2...

ai4rag (>=0.8.0, <=0.8.1), auto-survey (>=0.1.0, <=0.3.1) +6 more potentially affected by CVE-2026-44016 via docling (>=2.82.0, <=2.90.0)

docling PYPI version =2.82.0, =0.8.0, =0.1.0, =0.1.0, =0.40.0, =0.0.1, =0.1.0, =0.0.1, =0.0.2 Source cves: CVE-2026-44016 Source advisory: SNYK:PYTHON-DOCLING-17151857...

ai4rag (>=0.8.0, <=0.8.1), auto-survey (>=0.1.0, <=0.3.1) +6 more potentially affected by CVE-2026-44016 via docling (>=2.82.0, <=2.90.0)

docling PYPI version =2.82.0, =0.8.0, =0.1.0, =0.1.0, =0.40.0, =0.0.1, =0.1.0, =0.0.1, =0.0.2 Source cves: CVE-2026-44016 Source advisory: OSV:GHSA-PJ2V-GGQH-CMQ2...

data-prep-toolkit-transforms (>=0.2.1.dev0, <=0.2.1.dev2), data-prep-toolkit-transforms-ray (>=0.2.1.dev0, <=0.2.1.dev2) potentially affected by CVE-2026-44017 via docling (1.1.2)

docling PYPI version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - data-prep-toolkit-transforms =0.2.1.dev0, =0.2.1.dev0, =0.2.1.dev2 Source cves: CVE-2026-44017 Source advisory: OSV:GHSA-CJQG-RQ2H-2FVJ...

agentfoundry (1.2.9.1), ai4rag (>=0.8.0, <=0.8.1) +29 more potentially affected by CVE-2026-44017 via docling (>=2.8.1, <=2.90.0)

docling PYPI version =2.8.1, =0.8.0, =0.1.0, =0.1.0, =0.19.2, =1.40.0, =0.6.2, =2.0.0, =0.0.1, =0.1.0, =0.2.1, =0.6.1, =1.0.1, =1.0.17 and more Source cves: CVE-2026-44017 Source advisory: OSV:GHSA-CJQG-RQ2H-2FVJ...

llama-index-readers-docling (0.1.0), quackling (>=0.0.1, <=0.4.1) potentially affected by CVE-2026-44017 via docling (1.20.0)

docling PYPI version 1.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - llama-index-readers-docling 0.1.0 - quackling =0.0.1, =0.4.1 Source cves: CVE-2026-44017 Source advisory: OSV:GHSA-CJQG-RQ2H-2FVJ...

data-prep-toolkit-transforms (>=0.2.1.dev3, <=0.2.1) potentially affected by CVE-2026-44017 via docling (1.11.0)

docling PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - data-prep-toolkit-transforms =0.2.1.dev3, =0.2.1 Source cves: CVE-2026-44017 Source advisory: OSV:GHSA-CJQG-RQ2H-2FVJ...

agentfoundry (1.2.9.1), ai4rag (>=0.8.0, <=0.8.1) +29 more potentially affected by CVE-2026-44017 via docling (>=2.8.1, <=2.90.0)

docling PYPI version =2.8.1, =0.8.0, =0.1.0, =0.1.0, =0.19.2, =1.40.0, =0.6.2, =2.0.0, =0.0.1, =0.1.0, =0.2.1, =0.6.1, =1.0.1, =1.0.17 and more Source cves: CVE-2026-44017 Source advisory: SNYK:PYTHON-DOCLING-17151751...

Arbitrary File Write via Archive Extraction (Zip Slip)

Overview docling is a SDK and CLI for parsing PDF, DOCX, HTML, and more, to a unified document representation for powering downstream workflows such as gen AI applications. Affected versions of this package are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip in easyocrmodel.py...

agentfoundry (1.2.9.1), ai4rag (>=0.8.0, <=0.8.1) +29 more potentially affected by CVE-2026-44017 via docling (>=2.8.1, <=2.90.0)

docling PYPI version =2.8.1, =0.8.0, =0.1.0, =0.1.0, =0.19.2, =1.40.0, =0.6.2, =2.0.0, =0.0.1, =0.1.0, =0.2.1, =0.6.1, =1.0.1, =1.0.17 and more Source cves: CVE-2026-44017 Source advisory: GHSA-CJQG-RQ2H-2FVJ...

PT-2026-46123

Name of the Vulnerable Software and Affected Versions docling-core versions 1.5.0 through 2.74.0 Description The software does not sufficiently restrict remote request destinations and can resolve a server-provided Content-Disposition to a local path in an unsafe manner. In applications that acce...

PT-2026-45850

Name of the Vulnerable Software and Affected Versions docling-core versions 2.5.0 through 2.74.0 Description Insufficient input sanitization when processing specific documents allows for path traversal, enabling remote attackers to read arbitrary files from the host server. The software allows...

CVE-2026-44520 Docling-Graph: SSRF via Missing Internal IP Validation in URLInputHandler

Docling-Graph turns documents into validated Pydantic objects, then builds a directed knowledge graph with explicit semantic relationships. Prior to 1.5.1, the URLInputHandler class in doclinggraph/core/input/handlers.py makes HTTP requests to user-supplied URLs without validating whether the...

CVE-2026-44520

Docling-Graph turns documents into validated Pydantic objects, then builds a directed knowledge graph with explicit semantic relationships. Prior to 1.5.1, the URLInputHandler class in doclinggraph/core/input/handlers.py makes HTTP requests to user-supplied URLs without validating whether the...

CVE-2026-44520 Docling-Graph: SSRF via Missing Internal IP Validation in URLInputHandler

Docling-Graph turns documents into validated Pydantic objects, then builds a directed knowledge graph with explicit semantic relationships. Prior to 1.5.1, the URLInputHandler class in doclinggraph/core/input/handlers.py makes HTTP requests to user-supplied URLs without validating whether the...

Docling Graph: Input validation vulnerability

Docling Graph is a structured data processing tool developed by the Docling Project, which converts document content into knowledge graphs. Versions of Docling Graph prior to 1.5.1 contained a vulnerability related to input validation errors. This vulnerability stemmed from the lack of validation...

CVE-2026-44520: URL Redirection to Untrusted Site

Docling-Graph turns documents into validated Pydantic objects, then builds a directed knowledge graph with explicit semantic relationships. Prior to 1.5.1, the URLInputHandler class in doclinggraph/core/input/handlers.py makes HTTP requests to user-supplied URLs without validating whether the...

CVE-2026-31247

Docling's JATS XML backend is vulnerable to XML Entity Expansion XXE attacks thru 2.61.0. The backend uses etree.parse to parse XML files without disabling entity resolution. An attacker can craft a malicious XML file containing a nested entity expansion payload XML Bomb. When processed by Doclin...