Read the docs
TI-2026-68360 Aliases CVE-2026-105749GHSA-cgc7-9qp3-86m3

Docling table span parsing causes CPU and memory exhaustion

Priority MEDIUM 62CWE-400Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 2 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-400.

Summary

Docling from 2.0.0 before 2.131.0 and docling-slim from 2.92.0 before 2.131.0 accept unbounded rowspan and colspan values in HTML, JATS, OpenDocument spreadsheet and BoxNote table parsing. The backends allocate a grid proportional to the span, a case of uncontrolled resource consumption (CWE-400). A remote attacker can make a small crafted document exhaust CPU or allocate gigabytes of memory when a user converts it. A public exploit is linked in the references.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Description from the CNA

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.0.0 until 2.131.0, the HTML, JATS, OpenDocument spreadsheet, and BoxNote backends, including docling/backend/html_backend.py, docling/backend/jats_backend.py, and docling/backend/boxnote_backend.py, accept the rowspan and colspan attribute values without an upper bound and execute loops or allocate a table grid proportional to the declared span. A very small document can therefore cause sustained CPU use or multi-gigabyte memory allocation, and the document_timeout setting does not interrupt the single backend conversion call. Export through the TableData.grid property can further materialize the oversized grid. This issue is fixed in 2.131.0.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00291 21st percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial docling (docling-project): 2.131.0docling-slim (docling-project): 2.131.0+2 more productsRed Hat: 2 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
docling-projectdocling2.0.0 to before 2.131.02.131.0Patch availableCNA
docling-projectdocling-slim2.92.0 to before 2.131.02.131.0Patch availableCNA
—docling (PyPI)2.0.0 to before 2.131.02.131.0Patch availableGHSA-cgc7-9qp3-86m3
—docling-slim (PyPI)2.92.0 to before 2.131.02.131.0Patch availableGHSA-cgc7-9qp3-86m3
  • docling Vendordocling-project Affected 2.0.0 to before 2.131.0 Fixed in 2.131.0 Patch available CNA
  • docling-slim Vendordocling-project Affected 2.92.0 to before 2.131.0 Fixed in 2.131.0 Patch available CNA
  • docling (PyPI) Vendor— Affected 2.0.0 to before 2.131.0 Fixed in 2.131.0 Patch available GHSA-cgc7-9qp3-86m3
  • docling-slim (PyPI) Vendor— Affected 2.92.0 to before 2.131.0 Fixed in 2.131.0 Patch available GHSA-cgc7-9qp3-86m3

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:docling:docling:*:*:*:*:*:*:*:*2.0.0 to before 2.131.0Vulnerabledocling-project
  • cpe:2.3:a:docling:docling:*:*:*:*:*:*:*:* Versions 2.0.0 to before 2.131.0 Vulnerable ·docling-project

Remediation

Upgrade docling and docling-slim to 2.131.0, which fixes this issue. Red Hat has no plan for Lightspeed Core or Red Hat OpenShift AI (RHOAI).

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

  • Fix · CNA docling (docling-project) Fixed in 2.131.0
  • Fix · CNA docling-slim (docling-project) Fixed in 2.131.0
  • Fix · GHSA-cgc7-9qp3-86m3 docling (PyPI) Fixed in 2.131.0 Advisory →
  • Fix · GHSA-cgc7-9qp3-86m3 docling-slim (PyPI) Fixed in 2.131.0 Advisory →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Lightspeed CoreAffectedNo fix yet: Fix deferred
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet: Fix deferred

Timeline

  1. 2026-10-06 Threatist record created from CVE-2026-105749
  2. 2026-10-06 Affected versions changed · Red Hat
  3. 2026-10-06 CVSS score added · Red Hat
  4. 2026-10-07 Priority changed: MEDIUM → LOW
  5. 2026-10-07 Alias added: GHSA-cgc7-9qp3-86m3
  6. 2026-10-07 Fix available: PyPI/[email protected], PyPI/[email protected] · GHSA-cgc7-9qp3-86m3
  7. 2026-10-07 CVSS score added · GHSA-cgc7-9qp3-86m3
  8. 2026-10-07 Weakness changed · GHSA-cgc7-9qp3-86m3
  9. 2026-10-07 6 new references · GHSA-cgc7-9qp3-86m3
  10. 2026-10-08 CISA SSVC decision points changed
  11. 2026-10-08 Priority changed: LOW → MEDIUM

References

Exploit 1

Patch 2

Advisory 1

Other 2

  • TI-2026-68355 Docling Tectonic TikZ rendering enables arbitrary file read/write CVSS 3.1HIGH 8.8
  • TI-2026-68362 Arbitrary local file read in Docling OpenDocument backend CVSS 4.0MEDIUM 6.9
  • TI-2026-68353 Docling sends configured HTTP headers to any remote image host CVSS 3.1MEDIUM 5.3
  • TI-2026-68359 Docling embeds local image files from crafted JSON documents CVSS 3.1MEDIUM 4.3
  • TI-2026-32061 Docling: Unsafe XML Entity Expansion in USPTO Patent Backend CVSS 3.1HIGH 7.5
  • TI-2026-32058 Docling: Unsafe Zip Extraction in EasyOCR Model Download CVSS 3.1HIGH 7.5
See all 15 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences