CVE-2026-31248

Docling's METS GBS backend is vulnerable to XML Entity Expansion XXE attacks thru 2.61.0. The backend extracts and validates XML files from .tar.gz archives using etree.fromstring without disabling entity resolution. An attacker can craft a malicious XML file with nested entity definitions XML Bo...

data-prep-toolkit-transforms (>=0.2.1.dev3, <=0.2.1) potentially affected by CVE-2026-31248 via docling (1.11.0)

docling PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - data-prep-toolkit-transforms =0.2.1.dev3, =0.2.1 Source cves: CVE-2026-31248 Source advisory: OSV:GHSA-9F4Q-Q82Q-4359...

agentfoundry (1.2.9.1), instructlab-sdg (>=0.6.2, <=0.7.2) +14 more potentially affected by CVE-2026-31248 via docling (>=2.8.1, <=2.55.0)

docling PYPI version =2.8.1, =0.6.2, =2.0.0, =0.1.0, =0.2.1, =0.6.1, =1.0.1, =0.3.0, =0.3.1, =0.10.0, =0.2.1, =0.1.0, =1.3.41 - rakam-systems 0.2.4 and more Source cves: CVE-2026-31248 Source advisory: GHSA-9F4Q-Q82Q-4359...

GHSA-9F4Q-Q82Q-4359 Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks

Docling's METS GBS backend is vulnerable to XML Entity Expansion XXE attacks thru 2.61.0. The backend extracts and validates XML files from .tar.gz archives using etree.fromstring without disabling entity resolution. An attacker can craft a malicious XML file with nested entity definitions XML Bo...

agentfoundry (1.2.9.1), instructlab-sdg (>=0.6.2, <=0.7.2) +14 more potentially affected by CVE-2026-31248 via docling (>=2.8.1, <=2.55.0)

docling PYPI version =2.8.1, =0.6.2, =2.0.0, =0.1.0, =0.2.1, =0.6.1, =1.0.1, =0.3.0, =0.3.1, =0.10.0, =0.2.1, =0.1.0, =1.3.41 - rakam-systems 0.2.4 and more Source cves: CVE-2026-31248 Source advisory: OSV:GHSA-9F4Q-Q82Q-4359...

llama-index-readers-docling (0.1.0), quackling (>=0.0.1, <=0.4.1) potentially affected by CVE-2026-31248 via docling (1.20.0)

docling PYPI version 1.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - llama-index-readers-docling 0.1.0 - quackling =0.0.1, =0.4.1 Source cves: CVE-2026-31248 Source advisory: OSV:GHSA-9F4Q-Q82Q-4359...

data-prep-toolkit-transforms (>=0.2.1.dev0, <=0.2.1.dev2), data-prep-toolkit-transforms-ray (>=0.2.1.dev0, <=0.2.1.dev2) potentially affected by CVE-2026-31248 via docling (1.1.2)

docling PYPI version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - data-prep-toolkit-transforms =0.2.1.dev0, =0.2.1.dev0, =0.2.1.dev2 Source cves: CVE-2026-31248 Source advisory: OSV:GHSA-9F4Q-Q82Q-4359...

GHSA-CR42-RG2M-MQ4Q Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks

Docling's JATS XML backend is vulnerable to XML Entity Expansion XXE attacks thru 2.61.0. The backend uses etree.parse to parse XML files without disabling entity resolution. An attacker can craft a malicious XML file containing a nested entity expansion payload XML Bomb. When processed by Doclin...

data-prep-toolkit-transforms (>=0.2.1.dev3, <=0.2.1) potentially affected by CVE-2026-31247 via docling (1.11.0)

docling PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - data-prep-toolkit-transforms =0.2.1.dev3, =0.2.1 Source cves: CVE-2026-31247 Source advisory: OSV:GHSA-CR42-RG2M-MQ4Q...

agentfoundry (1.2.9.1), instructlab-sdg (>=0.6.2, <=0.7.2) +14 more potentially affected by CVE-2026-31247 via docling (>=2.8.1, <=2.55.0)

docling PYPI version =2.8.1, =0.6.2, =2.0.0, =0.1.0, =0.2.1, =0.6.1, =1.0.1, =0.3.0, =0.3.1, =0.10.0, =0.2.1, =0.1.0, =1.3.41 - rakam-systems 0.2.4 and more Source cves: CVE-2026-31247 Source advisory: GHSA-CR42-RG2M-MQ4Q...

data-prep-toolkit-transforms (>=0.2.1.dev0, <=0.2.1.dev2), data-prep-toolkit-transforms-ray (>=0.2.1.dev0, <=0.2.1.dev2) potentially affected by CVE-2026-31247 via docling (1.1.2)

docling PYPI version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - data-prep-toolkit-transforms =0.2.1.dev0, =0.2.1.dev0, =0.2.1.dev2 Source cves: CVE-2026-31247 Source advisory: OSV:GHSA-CR42-RG2M-MQ4Q...

agentfoundry (1.2.9.1), haiku-rag (>=0.19.2, <=0.33.0) +22 more potentially affected by CVE-2026-31247 via docling (>=2.8.1, <=2.73.1)

docling PYPI version =2.8.1, =0.19.2, =1.40.0, =0.6.2, =2.0.0, =0.1.0, =0.2.1, =0.6.1, =1.0.1, =0.3.0, =1.0.0, =2026.2.27, =2026.3.3 and more Source cves: CVE-2026-31247 Source advisory: SNYK:PYTHON-DOCLING-16757962...

Allocation of Resources Without Limits or Throttling

Overview docling is a SDK and CLI for parsing PDF, DOCX, HTML, and more, to a unified document representation for powering downstream workflows such as gen AI applications. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the...

agentfoundry (1.2.9.1), instructlab-sdg (>=0.6.2, <=0.7.2) +14 more potentially affected by CVE-2026-31247 via docling (>=2.8.1, <=2.55.0)

docling PYPI version =2.8.1, =0.6.2, =2.0.0, =0.1.0, =0.2.1, =0.6.1, =1.0.1, =0.3.0, =0.3.1, =0.10.0, =0.2.1, =0.1.0, =1.3.41 - rakam-systems 0.2.4 and more Source cves: CVE-2026-31247 Source advisory: OSV:GHSA-CR42-RG2M-MQ4Q...

llama-index-readers-docling (0.1.0), quackling (>=0.0.1, <=0.4.1) potentially affected by CVE-2026-31247 via docling (1.20.0)

docling PYPI version 1.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - llama-index-readers-docling 0.1.0 - quackling =0.0.1, =0.4.1 Source cves: CVE-2026-31247 Source advisory: OSV:GHSA-CR42-RG2M-MQ4Q...

EUVD-2026-29055

Docling's JATS XML backend is vulnerable to XML Entity Expansion XXE attacks thru 2.61.0. The backend uses etree.parse to parse XML files without disabling entity resolution. An attacker can craft a malicious XML file containing a nested entity expansion payload XML Bomb. When processed by Doclin...

agentfoundry (1.2.9.1), ai4rag (>=0.8.0, <=0.8.1) +33 more potentially affected by CVE-2026-31248 via docling (>=1.1.2, <=2.90.0)

docling PYPI version =1.1.2, =0.8.0, =0.1.0, =0.1.0, =0.2.1.dev0, =0.2.1.dev0, =0.19.2, =1.40.0, =0.6.2, =2.0.0, =0.0.1, =0.1.0, =0.2.1, =0.6.1, =0.6.3 and more Source cves: CVE-2026-31248 Source advisory: SNYK:PYTHON-DOCLING-16757932...

Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

Overview docling is a SDK and CLI for parsing PDF, DOCX, HTML, and more, to a unified document representation for powering downstream workflows such as gen AI applications. Affected versions of this package are vulnerable to Improper Restriction of Recursive Entity References in DTDs 'XML Entity...

CVE-2026-31248

Docling's METS GBS backend is vulnerable to XML Entity Expansion XXE attacks thru 2.61.0. The backend extracts and validates XML files from .tar.gz archives using etree.fromstring without disabling entity resolution. An attacker can craft a malicious XML file with nested entity definitions XML Bo...

CVE-2026-31247

Docling's JATS XML backend is vulnerable to XML Entity Expansion XXE attacks thru 2.61.0. The backend uses etree.parse to parse XML files without disabling entity resolution. An attacker can craft a malicious XML file containing a nested entity expansion payload XML Bomb. When processed by Doclin...