CVE-2026-31248

Docling's METS GBS backend is vulnerable to XML Entity Expansion XXE attacks thru 2.61.0. The backend extracts and validates XML files from .tar.gz archives using etree.fromstring without disabling entity resolution. An attacker can craft a malicious XML file with nested entity definitions XML Bo...

CVE-2026-31248

Docling's METS GBS backend is vulnerable to XML Entity Expansion XXE attacks thru 2.61.0. The backend extracts and validates XML files from .tar.gz archives using etree.fromstring without disabling entity resolution. An attacker can craft a malicious XML file with nested entity definitions XML Bo...

CVE-2026-31248: Improper Restriction of Recursive Entity References in DTDs

Docling's METS GBS backend is vulnerable to XML Entity Expansion XXE attacks thru 2.61.0. The backend extracts and validates XML files from .tar.gz archives using etree.fromstring without disabling entity resolution. An attacker can craft a malicious XML file with nested entity definitions XML Bo...

CVE-2026-31247: Uncontrolled Resource Consumption

Docling's JATS XML backend is vulnerable to XML Entity Expansion XXE attacks thru 2.61.0. The backend uses etree.parse to parse XML files without disabling entity resolution. An attacker can craft a malicious XML file containing a nested entity expansion payload XML Bomb. When processed by Doclin...

Docling security vulnerabilities

Docling is an open-source multi-format document parsing and AI integration tool developed by the Docling Project. Versions of Docling 2.61.0 and earlier contained security vulnerabilities. These vulnerabilities stemmed from the use of etree.parse to parse XML files without disabling entity parsin...

docling-graph has SSRF via Missing Internal IP Validation in URLInputHandler

Impact The URLInputHandler class in doclinggraph/core/input/handlers.py makes HTTP requests to user-supplied URLs without validating whether the target resolves to a private, loopback, or link-local IP address. The URLValidator only checks for a valid scheme and non-empty netloc, performing no...

GHSA-FQPH-J6V6-JVGX docling-graph has SSRF via Missing Internal IP Validation in URLInputHandler

Impact The URLInputHandler class in doclinggraph/core/input/handlers.py makes HTTP requests to user-supplied URLs without validating whether the target resolves to a private, loopback, or link-local IP address. The URLValidator only checks for a valid scheme and non-empty netloc, performing no...

Server-side Request Forgery (SSRF)

Overview docling-graph is an A tool to convert documents into knowledge graphs using Docling. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the URLInputHandler process. An attacker can access internal network resources or sensitive cloud metadata by...

io.github.onecx.quarkus:onecx-permissions (>=0.5.0, <=0.7.0), io.github.onecx.quarkus:onecx-permissions-client (>=0.5.0, <=0.7.0) +76 more potentially affected by CVE-2026-42333 via io.quarkiverse.openapi.generator:quarkus-openapi-generator (>=2.0.0, <=2.16.0-lts)

io.quarkiverse.openapi.generator:quarkus-openapi-generator MAVEN version =2.0.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.0.1, =0.0.1, =2.0.0, =2.2.13, =2.7.0, =10.0.0, =10.0.0, =10.0.0, =10.2.0 and more Source cves: CVE-2026...

Exploit for CVE-2026-24009

docling-core-CVE-2026-24009 T...

datapizza-ai-parsers-azure (0.0.2), datapizza-ai-parsers-docling (0.0.2) +1 more potentially affected by CVE-2026-2969 via datapizza-ai-core (0.0.1)

datapizza-ai-core PYPI version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on datapizza-ai-core and may be impacted: - datapizza-ai-parsers-azure 0.0.2 - datapizza-ai-parsers-docling 0.0.2 - datapizza-ai-tools-duckduckgo 0.0.2 Source cves:...

datapizza-ai-parsers-azure (0.0.2), datapizza-ai-parsers-docling (0.0.2) +1 more potentially affected by CVE-2026-2969 via datapizza-ai-core (0.0.1)

datapizza-ai-core PYPI version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on datapizza-ai-core and may be impacted: - datapizza-ai-parsers-azure 0.0.2 - datapizza-ai-parsers-docling 0.0.2 - datapizza-ai-tools-duckduckgo 0.0.2 Source cves:...

datapizza-ai-parsers-azure (0.0.2), datapizza-ai-parsers-docling (0.0.2) +1 more potentially affected by CVE-2026-2969 via datapizza-ai-core (0.0.1)

datapizza-ai-core PYPI version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on datapizza-ai-core and may be impacted: - datapizza-ai-parsers-azure 0.0.2 - datapizza-ai-parsers-docling 0.0.2 - datapizza-ai-tools-duckduckgo 0.0.2 Source cves:...

datapizza-ai-parsers-azure (0.0.2), datapizza-ai-parsers-docling (0.0.2) +1 more potentially affected by CVE-2026-2970 via datapizza-ai-core (0.0.1)

datapizza-ai-core PYPI version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on datapizza-ai-core and may be impacted: - datapizza-ai-parsers-azure 0.0.2 - datapizza-ai-parsers-docling 0.0.2 - datapizza-ai-tools-duckduckgo 0.0.2 Source cves:...

CVE-2026-24009

Docling Core or docling-core is a library that defines core data types and transformations in the document processing application Docling. A PyYAML-related Remote Code Execution RCE vulnerability, namely CVE-2020-14343, is exposed in docling-core starting in version 2.21.0 and prior to version...

GHSA-VQXF-V2GG-X3HC docling-core vulnerable to Remote Code Execution via unsafe PyYAML usage

Impact A PyYAML-related Remote Code Execution RCE vulnerability, namely CVE-2020-14343, is exposed in docling-core =2.21.0, 2.48.4 and, specifically only if the application uses pyyaml 5.4 and invokes doclingcore.types.doc.DoclingDocument.loadfromyaml passing it untrusted YAML data. Patches The...

io4it (>=2.0.0, <=3.0.4.1), leettools (>=1.0.14, <=1.0.17) potentially affected by CVE-2026-24009 via docling-core (>=2.21.1, <=2.26.3)

docling-core PYPI version =2.21.1, =2.0.0, =1.0.14, =1.0.17 Source cves: CVE-2026-24009 Source advisory: OSV:GHSA-VQXF-V2GG-X3HC...

docling-core vulnerable to Remote Code Execution via unsafe PyYAML usage

Impact A PyYAML-related Remote Code Execution RCE vulnerability, namely CVE-2020-14343, is exposed in docling-core =2.21.0, 2.48.4 and, specifically only if the application uses pyyaml 5.4 and invokes doclingcore.types.doc.DoclingDocument.loadfromyaml passing it untrusted YAML data. Patches The...

io4it (>=2.0.0, <=3.0.4.1), leettools (>=1.0.14, <=1.0.17) potentially affected by CVE-2020-14343 +1 more via docling-core (>=2.21.1, <=2.26.3)

docling-core PYPI version =2.21.1, =2.0.0, =1.0.14, =1.0.17 Source cves: CVE-2020-14343, CVE-2026-24009 Source advisory: SNYK:PYTHON-DOCLINGCORE-15091522...

io4it (>=2.0.0, <=3.0.4.1), leettools (>=1.0.14, <=1.0.17) potentially affected by CVE-2020-14343 +1 more via docling-core (>=2.21.1, <=2.26.3)

docling-core PYPI version =2.21.1, =2.0.0, =1.0.14, =1.0.17 Source cves: CVE-2020-14343, CVE-2026-24009 Source advisory: GHSA-VQXF-V2GG-X3HC...