PyPIPackage

docling-slim

8 known vulnerabilities (1 high, 6 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release: 2.149.0 (Nov 8, 2026): no advisory affects it
Newest unaffected release: 2.149.0 (Nov 8, 2026), the latest release
Advisories: 8 · 1 high, 6 medium, 1 low

Weekly downloads: 1M
Dependents: 272
Releases: 67 since 2.92.0 (Apr 29, 2026)
Registry: PyPI
Releases read: Nov 8, 2026

Version timeline

CVE-2026-105750
Affects 2.92.0 to 2.118.0 (2.118.1 is outside it)
CVE-2026-105749
Affects 2.92.0 to 2.130.0 (2.131.0 is outside it)
CVE-2026-105748
Affects 2.92.0 to 2.130.0 (2.131.0 is outside it)
CVE-2026-105747
Affects 2.92.0 to 2.130.0 (2.131.0 is outside it)
CVE-2026-105745
Affects 2.92.0 to 2.130.0 (2.131.0 is outside it)
CVE-2026-105744
Affects 2.94.0 to 2.131.0 (2.132.0 is outside it)
CVE-2026-105743
Affects 2.92.0 to 2.131.0 (2.132.0 is outside it)
CVE-2026-105742
Affects 2.95.0 to 2.131.0 (2.132.0 is outside it)

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 8

CVE-2026-105750Medium 5.9
Docling: `enable_local_fetch` is not enforced in HTML browser-rendering mode
Affected: from 2.92.0, fixed in 2.118.1.
Fixed in 2.118.1 (released Aug 7, 2026, 59 days before disclosure).
The latest release, 2.149.0, is not affected.
CVE-2026-105749Medium 6.5
Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustion
Affected: from 2.92.0, fixed in 2.131.0.
Fixed in 2.131.0 (released Sep 29, 2026, 6 days before disclosure).
The latest release, 2.149.0, is not affected.
CVE-2026-105748Medium 4.3
Docling: Crafted DoclingDocument JSON embeds local image files into converted output
Affected: from 2.92.0, fixed in 2.131.0.
Fixed in 2.131.0 (released Sep 29, 2026, 6 days before disclosure).
The latest release, 2.149.0, is not affected.
CVE-2026-105747Medium 4.3
Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)
Affected: from 2.92.0, fixed in 2.131.0.
Fixed in 2.131.0 (released Sep 29, 2026, 6 days before disclosure).
The latest release, 2.149.0, is not affected.
CVE-2026-105745Medium 6.7
Docling: Plugin entry points are imported before the allow_external_plugins check
Affected: from 2.92.0, fixed in 2.131.0.
Fixed in 2.131.0 (released Sep 29, 2026, 6 days before disclosure).
The latest release, 2.149.0, is not affected.
CVE-2026-105744High 7.5
Docling: Arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine
Affected: from 2.94.0, fixed in 2.132.0.
Fixed in 2.132.0 (released Oct 1, 2026, 4 days before disclosure).
The latest release, 2.149.0, is not affected.
CVE-2026-105743Medium 4.0
Docling: SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resolution; no IP validation in HTML render mode)
Affected: from 2.92.0, fixed in 2.132.0.
Fixed in 2.132.0 (released Oct 1, 2026, 4 days before disclosure).
The latest release, 2.149.0, is not affected.
CVE-2026-105742Low 3.7
Docling: Configured HTTP headers sent to every remote image host named by a document
Affected: from 2.95.0, fixed in 2.132.0.
Fixed in 2.132.0 (released Oct 1, 2026, 4 days before disclosure).
The latest release, 2.149.0, is not affected.