Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

docling — Vulnerabilities & Security Advisories 16

All 16 CVE vulnerabilities found in docling, with AI-generated Chinese analysis, references, and POCs.

The following page details vulnerability aggregation data for the docling software product, focusing on common weakness classifications and associated tags. This collection gathers information regarding security flaws, configuration errors, and implementation defects identified within the docling ecosystem, covering the period from its initial release through the most recent updates. By navigating this resource, users can effectively track vendor advisories related to docling, gain a deeper understanding of specific weakness classes that impact the application, and examine the complete historical record of vulnerabilities associated with this particular tool. This approach provides a centralized view of the security landscape for docling, allowing developers, security analysts, and system administrators to assess risk profiles accurately. The data is organized to facilitate quick lookup and comprehensive analysis, ensuring that stakeholders can stay informed about emerging threats and remediation efforts without sifting through disparate sources. All entries are contextualized to highlight the severity, affected versions, and recommended mitigation strategies, thereby supporting proactive security management. This aggregation serves as a reference point for evaluating the integrity and safety of docling deployments, enabling informed decision-making regarding updates and patches.

Vendor: docling-project

CVE ID Title CVSS Severity Published
CVE-2026-105751 Docling: Arbitrary local file read via draw:image xlink:href in the OpenDocument backend CWE-22 6.9 Medium 2026-10-05
CVE-2026-105750 Docling: `enable_local_fetch` is not enforced in HTML browser-rendering mode CWE-552 5.9 Medium 2026-10-05
CVE-2026-105749 Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustion CWE-400 6.5 Medium 2026-10-05
CVE-2026-105748 Docling: Crafted DoclingDocument JSON embeds local image files into converted output CWE-73 4.3 Medium 2026-10-05
CVE-2026-105747 Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection) CWE-409 4.3 Medium 2026-10-05
CVE-2026-105746 Docling: KServe v2 OCR engine does not enforce enable_remote_services CWE-668 2.2 Low 2026-10-05
CVE-2026-105745 Docling: Plugin entry points are imported before the allow_external_plugins check CWE-696 6.7 Medium 2026-10-05
CVE-2026-105744 Docling: Arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine CWE-22 7.5 High 2026-10-05
CVE-2026-105743 Docling: SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resolution; no IP validation in HTML render mode) CWE-367 4.0 Medium 2026-10-05
CVE-2026-105742 Docling: Configured HTTP headers sent to every remote image host named by a document CWE-201 3.7 Low 2026-10-05
CVE-2026-47214 Docling: Unsafe URI and Path Handling in HTML Backend CWE-73 7.1 High 2026-06-26
CVE-2026-44018 Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS Backend CWE-409 5.5 Medium 2026-06-26
CVE-2026-44017 Docling: Unsafe Zip Extraction in EasyOCR Model Download CWE-22 7.5 High 2026-06-24
CVE-2026-44022 Docling: Potential Path Traversal via LaTeX \includegraphics and \input Commands CWE-22 5.5 Medium 2026-06-24
CVE-2026-44020 Docling: Unsafe XML Entity Expansion in USPTO Patent Backend CWE-776 7.5 High 2026-06-24
CVE-2026-44016 Docling: Unsafe Playwright-based HTML Rendering CWE-94 8.2 High 2026-06-24

All 16 known CVE vulnerabilities affecting docling with full Chinese analysis, references, and POCs where available.