ai4rag (>=0.9.0, <=0.24.0), askbase (>=1.0.0, <=1.0.2) +19 more potentially affected by CVE-2026-105748 via docling-slim (>=2.92.0, <=2.130.0)

docling-slim PYPI version =2.92.0, =0.9.0, =1.0.0, =7.29.0, =2.92.0, =2.120.1, =0.1.0, =0.3.19, =0.1.2, =0.3.0, =0.14.0, =0.0.49, =1.0.0rc1, =0.17.0, =0.29.0 and more Source cves: CVE-2026-105748 Source advisory: OSV:GHSA-P944-4XH2-X776...

ai4rag (>=0.9.0, <=0.24.0), askbase (>=1.0.0, <=1.0.2) +19 more potentially affected by CVE-2026-105748 via docling-slim (>=2.92.0, <=2.130.0)

docling-slim PYPI version =2.92.0, =0.9.0, =1.0.0, =7.29.0, =2.92.0, =2.120.1, =0.1.0, =0.3.19, =0.1.2, =0.3.0, =0.14.0, =0.0.49, =1.0.0rc1, =0.17.0, =0.29.0 and more Source cves: CVE-2026-105748 Source advisory: GHSA-P944-4XH2-X776...

Docling: Crafted DoclingDocument JSON embeds local image files into converted output

Summary docling accepts serialized DoclingDocument JSON as an input format InputFormat.JSONDOCLING, enabled by default. A crafted JSON file can set a picture's image uri to a local file path. When the converted document is exported with embedded images ImageRefMode.EMBEDDED, the CLI default for...

agentfoundry (1.2.9.1), ai4rag (>=0.8.0, <=0.10.4) +45 more potentially affected by CVE-2026-105749 via docling (>=2.8.1, <=2.130.0)

docling PYPI version =2.8.1, =0.8.0, =1.0.0, =0.1.0, =0.1.0, =7.29.0, =0.1.0, =0.3.19, =0.1.2, =0.3.0, =0.14.0, =0.0.49, =0.0.51 and more Source cves: CVE-2026-105749 Source advisory: GHSA-CGC7-9QP3-86M3...

ai4rag (>=0.9.0, <=0.24.0), askbase (>=1.0.0, <=1.0.2) +19 more potentially affected by CVE-2026-105749 via docling-slim (>=2.92.0, <=2.130.0)

docling-slim PYPI version =2.92.0, =0.9.0, =1.0.0, =7.29.0, =2.92.0, =2.120.1, =0.1.0, =0.3.19, =0.1.2, =0.3.0, =0.14.0, =0.0.49, =1.0.0rc1, =0.17.0, =0.29.0 and more Source cves: CVE-2026-105749 Source advisory: OSV:GHSA-CGC7-9QP3-86M3...

EUVD-2026-92812

Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustion...

Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustion

Summary The HTML, JATS, ODS OpenDocument spreadsheet and BoxNote backends accept table rowspan / colspan values without an upper bound. A few bytes of input, such as , make docling run loops proportional to the declared span and allocate a table grid of the declared size. The result is CPU and...

agentfoundry (1.2.9.1), ai4rag (>=0.8.0, <=0.10.4) +45 more potentially affected by CVE-2026-105749 via docling (>=2.8.1, <=2.130.0)

docling PYPI version =2.8.1, =0.8.0, =1.0.0, =0.1.0, =0.1.0, =7.29.0, =0.1.0, =0.3.19, =0.1.2, =0.3.0, =0.14.0, =0.0.49, =0.0.51 and more Source cves: CVE-2026-105749 Source advisory: OSV:GHSA-CGC7-9QP3-86M3...

GHSA-CGC7-9QP3-86M3 Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustion

Summary The HTML, JATS, ODS OpenDocument spreadsheet and BoxNote backends accept table rowspan / colspan values without an upper bound. A few bytes of input, such as , make docling run loops proportional to the declared span and allocate a table grid of the declared size. The result is CPU and...

ai4rag (>=0.9.0, <=0.24.0), askbase (>=1.0.0, <=1.0.2) +19 more potentially affected by CVE-2026-105749 via docling-slim (>=2.92.0, <=2.130.0)

docling-slim PYPI version =2.92.0, =0.9.0, =1.0.0, =7.29.0, =2.92.0, =2.120.1, =0.1.0, =0.3.19, =0.1.2, =0.3.0, =0.14.0, =0.0.49, =1.0.0rc1, =0.17.0, =0.29.0 and more Source cves: CVE-2026-105749 Source advisory: GHSA-CGC7-9QP3-86M3...

ai4rag (>=0.9.0, <=0.24.0), askbase (>=1.0.0, <=1.0.2) +19 more potentially affected by CVE-2026-105745 via docling-slim (>=2.92.0, <=2.130.0)

docling-slim PYPI version =2.92.0, =0.9.0, =1.0.0, =7.29.0, =2.92.0, =2.120.1, =0.1.0, =0.3.19, =0.1.2, =0.3.0, =0.14.0, =0.0.49, =1.0.0rc1, =0.17.0, =0.29.0 and more Source cves: CVE-2026-105745 Source advisory: GHSA-9JXX-VJRV-H2RQ...

EUVD-2026-92805

Docling imports plugin entry points before the allowexternalplugins check...

ai4rag (>=0.9.0, <=0.24.0), askbase (>=1.0.0, <=1.0.2) +19 more potentially affected by CVE-2026-105745 via docling-slim (>=2.92.0, <=2.130.0)

docling-slim PYPI version =2.92.0, =0.9.0, =1.0.0, =7.29.0, =2.92.0, =2.120.1, =0.1.0, =0.3.19, =0.1.2, =0.3.0, =0.14.0, =0.0.49, =1.0.0rc1, =0.17.0, =0.29.0 and more Source cves: CVE-2026-105745 Source advisory: OSV:GHSA-9JXX-VJRV-H2RQ...

GHSA-9JXX-VJRV-H2RQ Docling imports plugin entry points before the allow_external_plugins check

Summary allowexternalplugins=False the default, and the CLI default is meant to restrict docling to its own model plugins. However, docling's plugin factories call pluggy's loadsetuptoolsentrypoints, which imports every module registered under docling's plugin entry-point group. Only afterwards...

agentfoundry (1.2.9.1), ai4rag (>=0.8.0, <=0.10.4) +41 more potentially affected by CVE-2026-105745 via docling (>=2.28.1, <=2.130.0)

docling PYPI version =2.28.1, =0.8.0, =1.0.0, =0.1.0, =0.1.0, =7.29.0, =0.1.0, =0.3.19, =0.1.2, =0.3.0, =0.14.0, =0.0.49, =0.0.51 and more Source cves: CVE-2026-105745 Source advisory: OSV:GHSA-9JXX-VJRV-H2RQ...

Docling imports plugin entry points before the allow_external_plugins check

Summary allowexternalplugins=False the default, and the CLI default is meant to restrict docling to its own model plugins. However, docling's plugin factories call pluggy's loadsetuptoolsentrypoints, which imports every module registered under docling's plugin entry-point group. Only afterwards...

agentfoundry (1.2.9.1), ai4rag (>=0.8.0, <=0.10.4) +41 more potentially affected by CVE-2026-105745 via docling (>=2.28.1, <=2.130.0)

docling PYPI version =2.28.1, =0.8.0, =1.0.0, =0.1.0, =0.1.0, =7.29.0, =0.1.0, =0.3.19, =0.1.2, =0.3.0, =0.14.0, =0.0.49, =0.0.51 and more Source cves: CVE-2026-105745 Source advisory: GHSA-9JXX-VJRV-H2RQ...

GHSA-3CR3-8M4C-FPXW Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)

Summary When docling detects the input format of a gzip-compressed tar archive METS-GBS, and later when the METS-GBS backend opens it, it calls tarfile.TarFile.getmembers. That builds the full member list in memory before the maxmembercount limit is checked. A small archive with a very large numb...

ai4rag (>=0.8.0, <=0.10.4), askbase (>=1.0.0, <=1.0.2) +31 more potentially affected by CVE-2026-105747 via docling (>=2.51.0, <=2.130.0)

docling PYPI version =2.51.0, =0.8.0, =1.0.0, =0.1.0, =0.1.0, =7.29.0, =0.1.0, =0.3.19, =0.1.2, =0.3.0, =0.14.0, =0.0.49, =1.40.0, =1.42.0 and more Source cves: CVE-2026-105747 Source advisory: OSV:GHSA-3CR3-8M4C-FPXW...

ai4rag (>=0.9.0, <=0.24.0), askbase (>=1.0.0, <=1.0.2) +19 more potentially affected by CVE-2026-105747 via docling-slim (>=2.92.0, <=2.130.0)

docling-slim PYPI version =2.92.0, =0.9.0, =1.0.0, =7.29.0, =2.92.0, =2.120.1, =0.1.0, =0.3.19, =0.1.2, =0.3.0, =0.14.0, =0.0.49, =1.0.0rc1, =0.17.0, =0.29.0 and more Source cves: CVE-2026-105747 Source advisory: OSV:GHSA-3CR3-8M4C-FPXW...