CVE-2026-105743

The Docling document processing library (versions 2.91.0 through 2.132.0 ) is vulnerable to a Server-Side Request Forgery (SSRF) . The root cause lies in docling/backend/utils/image_resource_loader.py, where the validate_url_safety function performs only a single IPv4 lookup before allowing the H...