Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

docling

18 known vulnerabilities (7 high, 9 medium, 2 low), with the versions each affects and the releases that fix them.

Latest release
2.149.0 (Nov 8, 2026): no advisory affects it
Newest unaffected release
2.149.0 (Nov 8, 2026), the latest release
Advisories
18 · 7 high, 9 medium, 2 low
Weekly downloads
904.2K
Dependents
256
Releases
239 since 0.1.0 (Jul 15, 2024)
Registry
PyPI
Releases read
Nov 8, 2026

Version timeline

Show all 18 advisoriesShow fewer advisories
Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 18

  • CVE-2026-105751Medium 6.9

    Docling: Arbitrary local file read via draw:image xlink:href in the OpenDocument backend

    Affected: from 2.107.0, fixed in 2.120.3.

    Fixed in 2.120.3 (released Aug 18, 2026, 48 days before disclosure).

    The latest release, 2.149.0, is not affected.

  • CVE-2026-105750Medium 5.9

    Docling: `enable_local_fetch` is not enforced in HTML browser-rendering mode

    Affected: from 2.82.0, fixed in 2.118.1.

    Fixed in 2.118.1 (released Aug 7, 2026, 59 days before disclosure).

    The latest release, 2.149.0, is not affected.

  • CVE-2026-105749Medium 6.5

    Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustion

    Affected: from 2.0.0, fixed in 2.131.0.

    Fixed in 2.131.0 (released Sep 29, 2026, 6 days before disclosure).

    The latest release, 2.149.0, is not affected.

  • CVE-2026-105748Medium 4.3

    Docling: Crafted DoclingDocument JSON embeds local image files into converted output

    Affected: from 2.16.0, fixed in 2.131.0.

    Fixed in 2.131.0 (released Sep 29, 2026, 6 days before disclosure).

    The latest release, 2.149.0, is not affected.

  • CVE-2026-105747Medium 4.3

    Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)

    Affected: from 2.45.0, fixed in 2.131.0.

    Fixed in 2.131.0 (released Sep 29, 2026, 6 days before disclosure).

    The latest release, 2.149.0, is not affected.

  • Docling: KServe v2 OCR engine does not enforce enable_remote_services

    Affected: from 2.83.0, fixed in 2.131.0.

    Fixed in 2.131.0 (released Sep 29, 2026, 6 days before disclosure).

    The latest release, 2.149.0, is not affected.

  • CVE-2026-105745Medium 6.7

    Docling: Plugin entry points are imported before the allow_external_plugins check

    Affected: from 2.27.0, fixed in 2.131.0.

    Fixed in 2.131.0 (released Sep 29, 2026, 6 days before disclosure).

    The latest release, 2.149.0, is not affected.

  • Docling: Arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine

    Affected: from 2.94.0, fixed in 2.132.0.

    Fixed in 2.132.0 (released Oct 1, 2026, 4 days before disclosure).

    The latest release, 2.149.0, is not affected.

  • CVE-2026-105743Medium 4.0

    Docling: SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resolution; no IP validation in HTML render mode)

    Affected: from 2.91.0, fixed in 2.132.0.

    Fixed in 2.132.0 (released Oct 1, 2026, 4 days before disclosure).

    The latest release, 2.149.0, is not affected.

  • Docling: Configured HTTP headers sent to every remote image host named by a document

    Affected: from 2.95.0, fixed in 2.132.0.

    Fixed in 2.132.0 (released Oct 1, 2026, 4 days before disclosure).

    The latest release, 2.149.0, is not affected.

  • Docling: Unsafe URI and Path Handling in HTML Backend

    Affected: fixed in 2.94.0.

    Fixed in 2.94.0 (released May 18, 2026, 39 days before disclosure).

    The latest release, 2.149.0, is not affected.

  • CVE-2026-44018Medium 5.5

    Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS Backend

    Affected: from 2.45.0, fixed in 2.91.0.

    Fixed in 2.91.0 (released Apr 23, 2026, 64 days before disclosure).

    The latest release, 2.149.0, is not affected.

  • Docling: Unsafe Zip Extraction in EasyOCR Model Download

    Affected: fixed in 2.91.0.

    Fixed in 2.91.0 (released Apr 23, 2026, 62 days before disclosure).

    The latest release, 2.149.0, is not affected.

  • CVE-2026-44022Medium 5.5

    Docling: Potential Path Traversal via LaTeX \includegraphics and \input Commands

    Affected: from 2.73.0, fixed in 2.91.0.

    Fixed in 2.91.0 (released Apr 23, 2026, 62 days before disclosure).

    The latest release, 2.149.0, is not affected.

  • Docling: Unsafe XML Entity Expansion in USPTO Patent Backend

    Affected: from 2.13.0, fixed in 2.74.0.

    Fixed in 2.74.0 (released Feb 17, 2026, 127 days before disclosure).

    The latest release, 2.149.0, is not affected.

Show all 18 advisoriesShow fewer advisories

  • Docling: Unsafe Playwright-based HTML Rendering

    Affected: from 2.82.0, fixed in 2.91.0.

    Fixed in 2.91.0 (released Apr 23, 2026, 62 days before disclosure).

    The latest release, 2.149.0, is not affected.

  • Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks thru 2.61.0.

    Affected: through 2.61.0.

    Fixed in 2.61.1 (released Nov 6, 2025, 186 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 2.149.0, is not affected.

  • Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks thru 2.61.0.

    Affected: through 2.61.0.

    Fixed in 2.61.1 (released Nov 6, 2025, 186 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 2.149.0, is not affected.