# docling-slim (PyPI) vulnerabilities 8 known vulnerabilities (1 high, 6 medium, 1 low), with the versions each affects and the releases that fix them. ## At a glance - Latest release: 2.149.0 (Nov 8, 2026): no advisory affects it - Newest unaffected release: 2.149.0 (Nov 8, 2026), the latest release - Weekly downloads: 1M - Dependents: 272 - Releases: 67 since 2.92.0 (Apr 29, 2026) - Registry: https://pypi.org/project/docling-slim/ - Releases read: Nov 8, 2026 ## Version timeline Affected versions per advisory, in version order: - CVE-2026-105750: 2.92.0 to 2.118.0 (2.118.1 is outside it) - CVE-2026-105749: 2.92.0 to 2.130.0 (2.131.0 is outside it) - CVE-2026-105748: 2.92.0 to 2.130.0 (2.131.0 is outside it) - CVE-2026-105747: 2.92.0 to 2.130.0 (2.131.0 is outside it) - CVE-2026-105745: 2.92.0 to 2.130.0 (2.131.0 is outside it) - CVE-2026-105744: 2.94.0 to 2.131.0 (2.132.0 is outside it) - CVE-2026-105743: 2.92.0 to 2.131.0 (2.132.0 is outside it) - CVE-2026-105742: 2.95.0 to 2.131.0 (2.132.0 is outside it) ## Advisories (8) ### [CVE-2026-105750](https://cve.now/CVE-2026-105750): Docling: \`enable\_local\_fetch\` is not enforced in HTML browser-rendering mode - Severity: Medium 5.9 - Published: Oct 5, 2026 - Affected: from 2.92.0, fixed in 2.118.1. - Fixed in 2.118.1 (released Aug 7, 2026, 59 days before disclosure). - The latest release, 2.149.0, is not affected. ### [CVE-2026-105749](https://cve.now/CVE-2026-105749): Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustion - Severity: Medium 6.5 - Published: Oct 5, 2026 - Affected: from 2.92.0, fixed in 2.131.0. - Fixed in 2.131.0 (released Sep 29, 2026, 6 days before disclosure). - The latest release, 2.149.0, is not affected. ### [CVE-2026-105748](https://cve.now/CVE-2026-105748): Docling: Crafted DoclingDocument JSON embeds local image files into converted output - Severity: Medium 4.3 - Published: Oct 5, 2026 - Affected: from 2.92.0, fixed in 2.131.0. - Fixed in 2.131.0 (released Sep 29, 2026, 6 days before disclosure). - The latest release, 2.149.0, is not affected. ### [CVE-2026-105747](https://cve.now/CVE-2026-105747): Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection) - Severity: Medium 4.3 - Published: Oct 5, 2026 - Affected: from 2.92.0, fixed in 2.131.0. - Fixed in 2.131.0 (released Sep 29, 2026, 6 days before disclosure). - The latest release, 2.149.0, is not affected. ### [CVE-2026-105745](https://cve.now/CVE-2026-105745): Docling: Plugin entry points are imported before the allow\_external\_plugins check - Severity: Medium 6.7 - Published: Oct 5, 2026 - Affected: from 2.92.0, fixed in 2.131.0. - Fixed in 2.131.0 (released Sep 29, 2026, 6 days before disclosure). - The latest release, 2.149.0, is not affected. ### [CVE-2026-105744](https://cve.now/CVE-2026-105744): Docling: Arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine - Severity: High 7.5 - Published: Oct 5, 2026 - Affected: from 2.94.0, fixed in 2.132.0. - Fixed in 2.132.0 (released Oct 1, 2026, 4 days before disclosure). - The latest release, 2.149.0, is not affected. ### [CVE-2026-105743](https://cve.now/CVE-2026-105743): Docling: SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resolution; no IP validation in HTML render mode) - Severity: Medium 4.0 - Published: Oct 5, 2026 - Affected: from 2.92.0, fixed in 2.132.0. - Fixed in 2.132.0 (released Oct 1, 2026, 4 days before disclosure). - The latest release, 2.149.0, is not affected. ### [CVE-2026-105742](https://cve.now/CVE-2026-105742): Docling: Configured HTTP headers sent to every remote image host named by a document - Severity: Low 3.7 - Published: Oct 5, 2026 - Affected: from 2.95.0, fixed in 2.132.0. - Fixed in 2.132.0 (released Oct 1, 2026, 4 days before disclosure). - The latest release, 2.149.0, is not affected. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/pypi/docling-slim Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.