Read the docs

docling-project

Records22All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

docling-project records in CISA KEV

No docling-project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

22 records

Priority HIGH 73

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00368 Published 2026-10-05 Partial fix · 2.132.0 CWE-1188
Priority MEDIUM 64

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.

CVSS 4.0MEDIUM 6.9 Network No auth User interaction EPSS 0.00418 Published 2026-10-05 Partial fix · 2.120.3 CWE-22
Priority MEDIUM 62

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00291 Published 2026-10-05 Partial fix · 2.131.0 CWE-400
Priority MEDIUM 57

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00254 Published 2026-10-05 Partial fix · 2.132.0 CWE-201
Priority MEDIUM 53

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00304 Published 2026-10-05 Partial fix · 2.131.0 CWE-200
Priority MEDIUM 44

Docling Core defines core data types and transformations for the document processing application Docling.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00427 Published 2026-07-16 Fixed in 2.74.1 CWE-22
Priority MEDIUM 40

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00601 Published 2026-06-24 Fixed in 2.74.0 CWE-776
Priority LOW 36

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00706 Published 2026-06-24 Fixed in 2.91.0 CWE-22
Priority LOW 36

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00593 Published 2026-06-24 Fixed in 2.91.0 CWE-918
Priority LOW 31

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00373 Published 2026-06-26 Fixed in 2.94.0 CWE-400
Priority LOW 28

docling-serve 1.14.0 through 1.36.0 contains a missing authentication vulnerability that allows unauthenticated attackers to access /v1/memory/stats and /v1/memory/counts because they omit the require_auth dependency.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00296 Published 2026-10-11 Fix deferred CWE-306
Priority LOW 25

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00201 Published 2026-10-05 Partial fix · 2.132.0 CWE-367
Priority LOW 24

docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allow_image_file_uri gate.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00335 Published 2026-10-19 Partial fix · 2.103.0 CWE-73
TI-2026-68358 CVE-2026-105747 · GHSA-3cr3-8m4c-fpxw · GHSA-f4ch-vxwc-3p2m

Memory exhaustion in Docling METS-GBS tar archive handling

Priority LOW 20

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00299 Published 2026-10-05 Partial fix · 2.131.0 CWE-409
Open these records in search →