Lucene search
+L

43 matches found

Github Security Blog
Github Security Blog
•added 2026/10/06 1:41 p.m.•13 views

Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)

Summary When docling detects the input format of a gzip-compressed tar archive METS-GBS, and later when the METS-GBS backend opens it, it calls tarfile.TarFile.getmembers. That builds the full member list in memory before the maxmembercount limit is checked. A small archive with a very large numb...

4.3CVSS5.7AI score0.0023EPSS
SaveExploits0References6Affected Software2
Rows per page
Query Builder