Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

16 records

Vendor: docling-project Component: Docling Clear all filters
TI-2026-68362 CVE-2026-105751 · GHSA-4xhp-xg4w-8ppm

Arbitrary local file read in Docling OpenDocument backend

Priority MEDIUM 64

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.

CVSS 4.0MEDIUM 6.9 Network No auth User interaction EPSS 0.00418 Published 2026-10-05 Partial fix · 2.120.3 CWE-22
TI-2026-68360 CVE-2026-105749 · GHSA-cgc7-9qp3-86m3

Docling table span parsing causes CPU and memory exhaustion

Priority MEDIUM 62

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00291 Published 2026-10-05 Partial fix · 2.131.0 CWE-400
TI-2026-68359 CVE-2026-105748 · GHSA-p944-4xh2-x776

Docling embeds local image files from crafted JSON documents

Priority MEDIUM 53

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00304 Published 2026-10-05 Partial fix · 2.131.0 CWE-200
TI-2026-68358 CVE-2026-105747 · GHSA-3cr3-8m4c-fpxw · GHSA-f4ch-vxwc-3p2m

Memory exhaustion in Docling METS-GBS tar archive handling

Priority LOW 20

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00299 Published 2026-10-05 Partial fix · 2.131.0 CWE-409
TI-2026-68355 CVE-2026-105744 · GHSA-x3q2-h9hx-4r4j

Docling Tectonic TikZ rendering enables arbitrary file read/write

Priority HIGH 73

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00368 Published 2026-10-05 Partial fix · 2.132.0 CWE-1188
TI-2026-68354 CVE-2026-105743 · GHSA-pc36-qwjq-x68c

SSRF guard bypass in Docling remote resource fetching

Priority LOW 25

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00201 Published 2026-10-05 Partial fix · 2.132.0 CWE-367
TI-2026-68353 CVE-2026-105742 · GHSA-p3fw-7699-7926

Docling sends configured HTTP headers to any remote image host

Priority MEDIUM 57

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00254 Published 2026-10-05 Partial fix · 2.132.0 CWE-201
TI-2026-34802 CVE-2026-47214 · GHSA-q29v-xc37-wh5m

Docling: Unsafe URI and Path Handling in HTML Backend

Priority LOW 31

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00373 Published 2026-06-26 Fixed in 2.94.0 CWE-400
TI-2026-32058 CVE-2026-44017 · GHSA-cjqg-rq2h-2fvj

Docling: Unsafe Zip Extraction in EasyOCR Model Download

Priority LOW 36

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00706 Published 2026-06-24 Fixed in 2.91.0 CWE-22
TI-2026-32061 CVE-2026-44020 · GHSA-m88r-rg27-5xfg

Docling: Unsafe XML Entity Expansion in USPTO Patent Backend

Priority MEDIUM 40

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00601 Published 2026-06-24 Fixed in 2.74.0 CWE-776
TI-2026-32057 CVE-2026-44016 · GHSA-pj2v-ggqh-cmq2

Docling: Unsafe Playwright-based HTML Rendering

Priority LOW 36

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00593 Published 2026-06-24 Fixed in 2.91.0 CWE-918