EUVD-2026-92809

Docling: METS-GBS archive member limit enforced after full member enumeration memory exhaustion during format detection...

CVE-2026-105747

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.131.0, METS-GBS format detection in docling/datamodel/document.py and the backend in docling/backend/metsgbsbackend.py call tarfile.TarFile.getmembers...

CVE-2026-105747 Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.131.0, METS-GBS format detection in docling/datamodel/document.py and the backend in docling/backend/metsgbsbackend.py call tarfile.TarFile.getmembers...

CVE-2026-105747 Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.131.0, METS-GBS format detection in docling/datamodel/document.py and the backend in docling/backend/metsgbsbackend.py call tarfile.TarFile.getmembers...

CVE-2026-105747

The Docling library (versions 2.45.0 to 2.131.0 ) is vulnerable to memory exhaustion during METS-GBS format detection. The vulnerability exists because the components docling/datamodel/document.py and docling/backend/mets_gbs_backend.py call tarfile.TarFile.getmembers() before enforcing the max_m...

CVE-2026-105747 Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.131.0, METS-GBS format detection in docling/datamodel/document.py and the backend in docling/backend/metsgbsbackend.py call tarfile.TarFile.getmembers...

PT-2026-106250

Name of the Vulnerable Software and Affected Versions Docling versions 2.45.0 through 2.130.0 Description METS-GBS format detection in docling/datamodel/document.py and the backend in docling/backend/mets gbs backend.py call the tarfile.TarFile.getmembers function before enforcing the max member...