Priority LOW 24
docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allow_image_file_uri gate.
Vulnerabilities
22 records
TI-2026-70727 CVE-2026-108749 · GHSA-rxxg-3pvc-749f
Missing authentication in docling-serve exposes memory endpoints
Priority LOW 28
docling-serve 1.14.0 through 1.36.0 contains a missing authentication vulnerability that allows unauthenticated attackers to access /v1/memory/stats and /v1/memory/counts because they omit the require_auth dependency.
TI-2026-68362 CVE-2026-105751 · GHSA-4xhp-xg4w-8ppm
Arbitrary local file read in Docling OpenDocument backend
Priority MEDIUM 64
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.
TI-2026-68361 CVE-2026-105750 · GHSA-q43m-vhcp-mhvm
Docling ignores enable_local_fetch in HTML browser rendering mode
Priority LOW 33
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.
TI-2026-68360 CVE-2026-105749 · GHSA-cgc7-9qp3-86m3
Docling table span parsing causes CPU and memory exhaustion
Priority MEDIUM 62
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.
TI-2026-68359 CVE-2026-105748 · GHSA-p944-4xh2-x776
Docling embeds local image files from crafted JSON documents
Priority MEDIUM 53
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.
TI-2026-68358 CVE-2026-105747 · GHSA-3cr3-8m4c-fpxw · GHSA-f4ch-vxwc-3p2m
Memory exhaustion in Docling METS-GBS tar archive handling
Priority LOW 20
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.
Priority LOW 23
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.
TI-2026-68356 CVE-2026-105745 · GHSA-9jxx-vjrv-h2rq
Docling imports plugin entry points before the external plugin check
Priority LOW 35
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.
TI-2026-68355 CVE-2026-105744 · GHSA-x3q2-h9hx-4r4j
Docling Tectonic TikZ rendering enables arbitrary file read/write
Priority HIGH 73
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.
TI-2026-68354 CVE-2026-105743 · GHSA-pc36-qwjq-x68c
SSRF guard bypass in Docling remote resource fetching
Priority LOW 25
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.
TI-2026-68353 CVE-2026-105742 · GHSA-p3fw-7699-7926
Docling sends configured HTTP headers to any remote image host
Priority MEDIUM 57
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.
TI-2026-32063 CVE-2026-44023 · GHSA-jmmv-h3mp-59v8
Docling Core has unsafe remote filename resolution
Priority MEDIUM 44
Docling Core defines core data types and transformations for the document processing application Docling.
TI-2026-32060 CVE-2026-44019 · GHSA-j5xp-7m2f-49jv
Docling Core has insufficient validation of image reference URIs
Priority LOW 36
Docling Core defines core data types and transformations for the document processing application Docling.
TI-2026-34802 CVE-2026-47214 · GHSA-q29v-xc37-wh5m
Docling: Unsafe URI and Path Handling in HTML Backend
Priority LOW 31
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.
TI-2026-32059 CVE-2026-44018 · GHSA-r3xg-rg9j-67fv
Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS Backend
Priority LOW 30
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.
TI-2026-32058 CVE-2026-44017 · GHSA-cjqg-rq2h-2fvj
Docling: Unsafe Zip Extraction in EasyOCR Model Download
Priority LOW 36
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.
TI-2026-32062 CVE-2026-44022 · GHSA-2j5p-7p5m-cvqr
Docling: Potential Path Traversal via LaTeX \includegraphics and \input Commands
Priority LOW 24
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.
TI-2026-32061 CVE-2026-44020 · GHSA-m88r-rg27-5xfg
Docling: Unsafe XML Entity Expansion in USPTO Patent Backend
Priority MEDIUM 40
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.
TI-2026-32057 CVE-2026-44016 · GHSA-pj2v-ggqh-cmq2
Docling: Unsafe Playwright-based HTML Rendering
Priority LOW 36
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.
TI-2026-32449 CVE-2026-44520 · GHSA-fqph-j6v6-jvgx
Docling-Graph: SSRF via Missing Internal IP Validation in URLInputHandler
Priority LOW 25
Docling-Graph turns documents into validated Pydantic objects, then builds a directed knowledge graph with explicit semantic relationships.
TI-2026-19347 CVE-2026-24009 · GHSA-vqxf-v2gg-x3hc
Docling Core vulnerable to Remote Code Execution via unsafe PyYAML usage
Priority MEDIUM 46
Docling Core (or docling-core) is a library that defines core data types and transformations in the document processing application Docling.